last executing test programs: 24m16.64614996s ago: executing program 32 (id=75): io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x40800, 0x3}) socket$inet_icmp(0x2, 0x2, 0x1) gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x62300) close(r0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}, 0x1, 0x0, 0x0, 0xd9}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102384, 0x18ff0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) 23m35.471264434s ago: executing program 0 (id=142): socket$packet(0x11, 0x3, 0x300) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8c) fchdir(r1) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x2a0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) close(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0400292020"], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x880) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) getpid() r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 23m34.319341991s ago: executing program 0 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x6be7, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 23m32.13328321s ago: executing program 0 (id=146): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000020"], 0x0}, 0x94) r0 = socket(0x11, 0x2, 0x0) close(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x5620232c, @empty, 0x4000005}, 0x1c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x13}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004412}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) socket(0x2, 0x80805, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) 23m28.887391508s ago: executing program 0 (id=151): setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x40010021, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x125000, 0x0, 0xfffffffffffffc44, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x64, 0x0, &(0x7f0000000540)=[@increfs, @register_looper, @acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x8b}, @flat=@handle={0x73682a85, 0x101, 0x2}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020}, 0x2062) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) 23m26.121038886s ago: executing program 0 (id=155): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x189502, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x642003, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r2, 0xffff) close(0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0) 23m24.983572807s ago: executing program 0 (id=157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) ioctl(r5, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 23m9.723826529s ago: executing program 33 (id=157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) ioctl(r5, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 19m34.899522237s ago: executing program 2 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, 0x0, 0x8800) socket$kcm(0x11, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) 19m28.890104821s ago: executing program 2 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0x2) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) 19m27.743020438s ago: executing program 2 (id=476): socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vbi(0x0, 0x1, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) setsockopt$inet_tcp_int(r5, 0x6, 0x2, 0x0, 0x0) 19m26.773591169s ago: executing program 2 (id=479): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e1f, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/167, 0xa7}, 0x8}], 0x1, 0x22, 0x0) socket$isdn(0x22, 0x2, 0x21) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19m25.693889642s ago: executing program 2 (id=482): io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x40800, 0x3}) socket$inet_icmp(0x2, 0x2, 0x1) gettid() close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}, 0x1, 0x0, 0x0, 0xd9}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102384, 0x18ff0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) 19m22.826370843s ago: executing program 2 (id=488): sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000400), 0x1003, r0}, 0x38) 19m6.63871495s ago: executing program 34 (id=488): sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000400), 0x1003, r0}, 0x38) 13m27.532402624s ago: executing program 7 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 13m27.249658943s ago: executing program 7 (id=1437): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x48a}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800a00010072656469720000000c00028008000340000000640900010073797a30000100000900020073797a3200000000140000"], 0x74}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 13m26.181470434s ago: executing program 7 (id=1438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x101, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7ffffffe, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0x10d2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x1, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 13m24.535036761s ago: executing program 7 (id=1444): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 13m24.150742s ago: executing program 7 (id=1446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000000900020073797a32000000000900010073797a310000000028000480240001800b000100736f636b657400001400028008000240000000000800"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 13m23.893032355s ago: executing program 7 (id=1448): r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10002, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @local, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x3a}, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5, 0x100, @void}}}}}}}}}, 0x46) 13m8.769634284s ago: executing program 35 (id=1448): r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10002, &(0x7f0000000140)={0xa, 0x4e21, 0x4, @local, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x3a}, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5, 0x100, @void}}}}}}}}}, 0x46) 8m10.348015575s ago: executing program 4 (id=2378): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a78", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff000000bfa1c36161eb84fd1bd792b417b20400"], 0x2c}}, 0x0) 8m7.985719763s ago: executing program 4 (id=2389): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x34040100) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x8040) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 8m7.681463967s ago: executing program 4 (id=2391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) 8m7.223460868s ago: executing program 4 (id=2394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10050}, 0x4) 8m6.153071867s ago: executing program 4 (id=2396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, 0x0, 0xfdef) 8m5.548361093s ago: executing program 4 (id=2403): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 7m50.32136316s ago: executing program 36 (id=2403): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 2m47.145865843s ago: executing program 9 (id=3548): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x110}, 0x2}, 0x0) 2m46.356593697s ago: executing program 9 (id=3549): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_delete(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setns(0xffffffffffffffff, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x77359400}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 2m41.330707354s ago: executing program 9 (id=3559): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x110}, 0x2}, 0x0) 2m41.080902684s ago: executing program 9 (id=3560): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000012c0)="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", 0x7f5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="f9d4f67040d23df2ccc2df30214332fdb06d9fba6f0bede3365069e0edfa8ff35ec0537d447fc4d5639dca29cd1b9961bb6766c9e455ec1a7ee61abdb6f9988cfa30", 0x42}, {&(0x7f0000000cc0)="5b8e4b5324cfc0f07519dcb86f89c342ccd558018c69331cef06e1a604c92c4886a2b951506a557b548d58f2d1a7bb03", 0x30}, {&(0x7f00000022c0)="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", 0x781}], 0x3}}], 0x2, 0x4040) 2m40.925045151s ago: executing program 9 (id=3561): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000aa000000006"], 0xc8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000101000400004e21000200000000210000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0280ffffff00000000000000000001000004d632000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd7000053500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m40.687141594s ago: executing program 9 (id=3564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m24.991789839s ago: executing program 37 (id=3564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.03394962s ago: executing program 1 (id=3870): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 17.843382968s ago: executing program 5 (id=3871): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="010027bd70000000000067db000008"], 0x34}}, 0x8080) 17.756808641s ago: executing program 1 (id=3872): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_delete(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setns(0xffffffffffffffff, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) close(r4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x77359400}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xf8, 0x4, 0x8, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x7, 0x6, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@RTM_NEWMDB={0x38, 0x54, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0xafb5458936ff85bb, 0x4, {@in6_addr=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) 17.664763065s ago: executing program 5 (id=3874): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(r1) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xf0) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @private0, 0xffff8000}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000300)={0x2}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001040)='/sys/power/pm_print_times', 0x8042, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$netlink(0x10, 0x3, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00"/13, @ANYRESHEX=r3], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000118500000086000000b708000000000000dbaaf8fff1000000b5080000020000007b8a", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 17.384947889s ago: executing program 3 (id=3875): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a00020034000000000000"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 15.798262058s ago: executing program 3 (id=3877): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.645523558s ago: executing program 5 (id=3878): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0xb, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080006400000684f6fb57e6cd6ddf154169cf50d3355000021f60130436a6c9a7cc54d1b6e5d70b83fec1db7faa913c6746a54788007363e804903c1ee4234757023"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fec000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 15.259042843s ago: executing program 5 (id=3881): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_delete(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setns(0xffffffffffffffff, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xf8, 0x4, 0x8, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x7, 0x6, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) 15.15610351s ago: executing program 8 (id=3882): syz_usb_connect$uac1(0x4, 0xaf, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x3, 0x1, 0x3, 0x90, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6e3, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x3, 0x5, 0x4, [0x2, 0x5, 0x8, 0x3], 0x9}, @processing_unit={0xd, 0x24, 0x7, 0x5, 0x7, 0x1, "32ea98e0acca"}, @mixer_unit={0xb, 0x24, 0x4, 0x1, 0x3, '\x00\x00\x00\x00\x00\x00'}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x2, 0x9}, @selector_unit={0x6, 0x24, 0x5, 0x21, 0xf, "e7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc, 0x1, 0x5e, 0x7, ';', '='}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0xf9, 0x1, {0x7, 0x25, 0x1, 0x102, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0xe, 0x9, {0x7, 0x25, 0x1, 0x2, 0xf, 0x1000}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x74, 0xff, 0xfa, 0x8, 0xf8}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x3, [{0x3b, &(0x7f0000000300)=@string={0x3b, 0x3, "bb4f5091cb6e43ca450a9e6375453497e4eb698d11cca0aa47af3a2d25ce598afd0e1310cbb0a00588cb4458c84991dac2aa4e88ef4c46a682"}}, {0x40, &(0x7f0000000440)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e70009"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) 14.761813377s ago: executing program 6 (id=3883): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) ioctl(r5, 0x8b22, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 10.553845703s ago: executing program 6 (id=3884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(r4, &(0x7f0000000300)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)) socket$inet(0x2, 0x3, 0x8d) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 10.354172147s ago: executing program 1 (id=3885): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000000000067db0000"], 0x34}}, 0x8080) 10.106808853s ago: executing program 8 (id=3886): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec"], 0xfdef) 9.898771124s ago: executing program 1 (id=3887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x3, 0x8d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r5, @ANYRES8=r5, @ANYRESHEX=r4, @ANYRES16=r5, @ANYRESDEC, @ANYBLOB="98d6c8837ccbd4ecf2bc4874d8360a53f035187c0add6b7e55d81ccb05"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7.810824618s ago: executing program 6 (id=3888): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe800000000000"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 7.409685869s ago: executing program 6 (id=3889): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(r1) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xf0) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @private0, 0xffff8000}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000300)={0x2}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001040)='/sys/power/pm_print_times', 0x8042, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$netlink(0x10, 0x3, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00"/13, @ANYRESHEX=r3], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000118500000086000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 7.390581609s ago: executing program 8 (id=3890): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed00080001"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7.089654106s ago: executing program 5 (id=3891): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0x40, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xa8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) ioprio_set$pid(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004380)=@newchain={0x62d8, 0x64, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x1, 0xea1a1b02db04f451}, {0xf, 0xffe0}, {0xb, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x8c}}, @TCA_CHAIN={0x8, 0xb, 0x88e5}, @filter_kind_options=@f_route={{0xa}, {0x6250, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_ACT={0x65c, 0x6, [@m_nat={0xac, 0x13, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7ff, 0x10000000, 0xffff, 0x7}, @private=0xa010102, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x3, 0xc, 0x3}, @remote, @local, 0xffffffff}}]}, {0x33, 0x6, "b5b75b2c25a91668e531238cb10b531baf6ebb092eb975180a9b145c34ad3eb1b50502dfa19bbb6aa0baf6b32a74d4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x8c, 0x12, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x749}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x20000000, 0x1, 0xbf1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x2a, 0x6, "a1efd99fd59dd8f45de0e29a99fa488abec939548e59c89f04aa7a40b37474b93860101f467f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xd0, 0x1a, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x5b39, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x10}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x10001, 0x2, 0x400, 0xb4b4}, 0xd}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffd2b, 0x1, 0x1, 0x1, 0x2}, 0x6}}]}, {0x13, 0x6, "ab0208f21dae08bbb450be3e69fbe1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_gact={0x48, 0x1b, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x9, 0x7, 0x7, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_pedit={0xb8, 0x1a, 0x0, 0x0, {{0xa}, {0x30, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4}]}]}, {0x5d, 0x6, "3acd622a0546d735cff0bea5956eee0cb422581f6ed10bcdca85bad7dda914d05bcbe1695fe176519fdb89907026e791df3970cedea3f1c8ec4dee829a5eb629baa8af2d5deafeb44fc5eefc26381b23c447a2a17f40180c16"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x68, 0xb, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1a}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x7be74}, @TCA_MPLS_PROTO={0x6, 0x4, 0x7}]}, {0xc, 0x6, "2611a0de0b9dc463"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0x100, 0x5, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1b}]}, {0xc1, 0x6, "a173850f7713243303e6f61f2fd2307434f66be2f107bf8ac40abdbbc2d1e07a85f7d156f2f2a34b6a799f1b29ef83fde7798a92f4af075549cfcd3ea888b9af2e303bae8b1d0d3040643ec2e5f8b55e0f272dc5096054c509dc286c1c519139f3362c797902ced37c592f17b3e7bdb7631824a41e027c80223e751ed764b236cb9472e10c13e8825b0eeb0a877096662ef15244cf882f15c95b3afd80be1a6ba8cefb52c1eefa540d67ea21497d1953ce4a157347e2944b6960032d40"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x10c, 0x1e, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xd8, 0x6, "07d0d5e91a6408385711ec83ce4aa43d5531b3eb27f44bbb875ba6bb5713e63073c1b1bda8fd2ecf77093de443fe0558959bce78ee7441467845cb37a1ed311e877c0c8bc2b5833d3797e2561bd9347712e35a0dcbd6d6d22dcf991b0e7d7df83992d3e50f9ce7853c3c781c72a25318a3cb18de5763ec7f16a893202d8641bc166d0a4f6a02bc9c2c47920d6164297e70955cd8d67e8146062e4bb83808ae316a51e5132f89e6bcf188fa894adee61216daa5e9b754b0d92c4c7eb169afda5dc3fa5007f06ed36b71c24245a7b1f636a3e17f93"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0xdc, 0x10, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x4, 0x4}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7fffffff, 0x20000000, 0x2, 0xc3e}, 0x29}}]}, {0x77, 0x6, "a90a956f6349d10308a8062c9007a710d3b1c6745f993acffb44b500413b92a0d70a8ea28c193bbd442bffe3aac76036733bcaa5aa1d0bb152d94219337c810a608b19a878661084c78d1409351482d47e7bc676d12a2ee4f242d57479113b23d743b7ca02ef8476d54a664f205227b8bd2721"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xad}, @TCA_ROUTE4_ACT={0x4b94, 0x6, [@m_pedit={0x3c08, 0x1c, 0x0, 0x0, {{0xa}, {0x2bdc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x80, 0xb, 0x8, 0x1, 0x6}, 0x4, 0xd, [{0x3, 0x1568, 0x7, 0x2, 0x1, 0x9}, {0x9, 0xffff0001, 0x7, 0x5, 0x6, 0x970}, {0x7f, 0x53e5, 0x30, 0x6, 0x2, 0x6}, {0x3ff, 0x9, 0xdb1, 0x0, 0xfffffff9, 0x9}, {0x6, 0xa, 0x2, 0x2, 0x7, 0x1}, {0xffffff01, 0x5, 0x2, 0x5, 0x81}, {0x10000, 0x7fffffff, 0x9, 0x3, 0x8, 0x253}, {0x6, 0x6, 0x10001, 0x8, 0x4, 0x9}, {0x7fff, 0x3, 0x4, 0x8, 0x6, 0x1}]}, [{0x8, 0x8, 0x7ff, 0x9, 0x9}, {0x6, 0xfff, 0x1, 0x5, 0x0, 0x4}, {0x5, 0x2, 0x4, 0x26, 0x0, 0xffffff9c}, {0xfffffffb, 0x9, 0x48f5, 0x6, 0x2e7, 0x3}, {0x8, 0x3, 0x5, 0x6, 0x9, 0xd3}, {0x3, 0xb, 0x31, 0x7, 0x8, 0x4}, {0x4, 0x7f, 0x913d, 0xff, 0x2, 0x5}, {0x10, 0x81, 0x10, 0x6, 0x36, 0x7f2}, {0x200, 0xca, 0x48000000, 0x0, 0x3dc189eb, 0x80000001}, {0x0, 0x9, 0x40, 0x8001, 0x40, 0x9}, {0x5, 0x73, 0xf, 0x33, 0x3, 0x6}, {0x3, 0x1000, 0x7, 0x0, 0x1, 0x8}, {0x5, 0x5, 0x9f02, 0x6, 0x21, 0x1}, {0x101, 0xfffffff7, 0x7, 0x8, 0x283e, 0x6}, {0xffffffff, 0xe, 0xfa, 0x9, 0x81}, {0x500, 0x2, 0x9, 0x5, 0x1, 0x5}, {0x2, 0x9, 0x8001, 0x6b70, 0xf, 0x445}, {0x5, 0x71c91055, 0xffff, 0x57dae0db, 0x270000}, {0xfffffff2, 0x2, 0x5, 0x9, 0x10001, 0x5}, {0x7ff, 0x3, 0x1, 0x5, 0x3, 0x6d2}, {0x9, 0x5, 0x2a45, 0x0, 0x3, 0x2}, {0xc, 0x2, 0x200, 0x1, 0x782c, 0x1000}, {0x1, 0x0, 0xb, 0x7ff, 0x8, 0x8}, {0x2, 0x6, 0x3, 0x7f, 0x9, 0x29d}, {0x4, 0x3, 0x1, 0x1, 0x4, 0x80000000}, {0x1, 0x7f, 0x2, 0x9, 0x1, 0x8}, {0xfe5d, 0x5, 0x0, 0xa, 0x101, 0x4}, {0x5, 0x2, 0x5, 0x10, 0x3e, 0x2}, {0x5fc, 0x401, 0x2, 0x8, 0x3, 0x100}, {0xd0, 0x6, 0x8000, 0xa3, 0xd0, 0x2}, {0x1, 0x2, 0x3, 0x0, 0xfffffff8, 0x6}, {0x0, 0x3, 0xffffff37, 0xffffffff, 0x6, 0x200}, {0x6, 0xffff8001, 0x9, 0xd3da, 0x40, 0x7}, {0x2, 0x100, 0x100, 0x3, 0x0, 0x9}, {0x6, 0x4000000, 0xba, 0x6, 0x34a, 0x1}, {0x5, 0x9, 0x8000, 0x8, 0x8000, 0xaf2}, {0x3ff, 0x1, 0x581a, 0xffffffff, 0x610a, 0x101}, {0x100, 0x6, 0x6, 0xfff, 0x3, 0x5}, {0x5, 0x5, 0x1, 0x1000000, 0x7, 0x6}, {0x1, 0x401, 0x93b, 0x1, 0xfffffffd}, {0xafea, 0x7, 0x6, 0xfffffffa, 0x5fe, 0x101}, {0x0, 0x7, 0x0, 0x6, 0xff, 0xc5}, {0x4, 0x0, 0x7, 0x63, 0x8, 0x5}, {0x80, 0x541, 0x0, 0x7f, 0x6, 0xfffffffa}, {0x5d1863c8, 0x800, 0x7fff, 0x5, 0x34, 0x2}, {0x5, 0xfffffffe, 0x2, 0x0, 0x8, 0xcf32}, {0x2, 0x8, 0x5, 0x8c5b, 0x5, 0x1e94}, {0x7, 0xfffff801, 0x4a, 0xfff, 0x4, 0x8}, {0xfffffffa, 0x7, 0x8, 0x9, 0x10, 0x5}, {0x1, 0x7fffffff, 0x9, 0x2, 0x200, 0x6}, {0x10001, 0x1, 0x1, 0x8, 0x7, 0xa}, {0x5, 0xa, 0xa5, 0x7, 0x6, 0x3}, {0x5, 0x9, 0x7eac, 0xd1, 0xfffffffe, 0x6}, {0xb, 0xffffffff, 0x1ff, 0x9, 0x8, 0x4}, {0x3, 0x0, 0x6, 0xeb06, 0x80000000, 0xb}, {0x8, 0x0, 0x84f9, 0x776, 0x8001, 0x6}, {0x7, 0x7, 0x4, 0xe36, 0x7, 0x4e}, {0xb, 0xffff, 0x10000, 0x7, 0x6e, 0x9}, {0xfffffff9, 0xe7, 0x182, 0xa0, 0x0, 0x400}, {0x4, 0xd, 0x8, 0xfffffffd, 0x595, 0xffff35a5}, {0x6917, 0x3, 0x200, 0x8, 0xa0f3}, {0x9f, 0xfffeffff, 0x1, 0x5, 0x8, 0x7fffffff}, {0x4, 0x2, 0x2, 0x2, 0xda61, 0xe}, {0x7, 0xc, 0x1, 0xb, 0x9b, 0x4f7}, {0xa65, 0x10001, 0x4, 0x2, 0x6, 0x2}, {0xfffff800, 0xe, 0x81, 0xfffffff7, 0x7, 0xc30c}, {0x7, 0x8, 0x0, 0xfffffffd, 0x1ff, 0x8}, {0x2, 0x5, 0x2, 0x7, 0x8}, {0x2, 0x9, 0x8578, 0x1, 0x3, 0xfffffffa}, {0x8, 0x8, 0x8, 0x4, 0x5, 0x3}, {0x8, 0xf5, 0xb2, 0x6, 0xdd, 0x3}, {0x5, 0xbd6, 0x5, 0x0, 0x8, 0xf}, {0xbb, 0x1000, 0x4, 0x7, 0xff, 0x4}, {0x2, 0xfffffffe, 0x1, 0x1, 0xc, 0xd95}, {0x2, 0x101, 0xaf1c, 0x40, 0x7, 0xa}, {0x6, 0x8001, 0x5, 0x10, 0x10, 0x8}, {0x7, 0x5, 0xe, 0x8, 0xd, 0xfff}, {0x3, 0x34, 0x6, 0xffffffff, 0xb, 0x80000000}, {0x80, 0x2, 0x1000, 0x4, 0x1a, 0x14}, {0x2, 0x2, 0x83, 0x2, 0x2ad, 0x8000}, {0x1, 0x7fffffff, 0x2, 0x7fffffff, 0x100, 0x5}, {0x99, 0x0, 0xb42, 0x7, 0x7fff, 0x2}, {0x17, 0x52d, 0x6, 0x9, 0x0, 0x7fffffff}, {0x5, 0x80000001, 0x8, 0x6, 0x7, 0x7}, {0x0, 0x7f, 0x1, 0x6, 0x1, 0x10}, {0xa71, 0x8000, 0x10000, 0xe, 0x10, 0x8}, {0x5, 0x2, 0x3ff, 0x1, 0x1, 0x7f}, {0x4, 0x4, 0x0, 0x9636, 0x3, 0x75e171ee}, {0x9, 0x0, 0x8, 0x794, 0x0, 0x3}, {0x6, 0x2, 0x7, 0x8, 0x7, 0x5}, {0x7, 0x6, 0x5, 0x2, 0x10001, 0x8}, {0x5, 0x0, 0x7, 0x800000, 0x2, 0x4}, {0x6, 0x9a, 0x7, 0xf, 0x6, 0x101}, {0x3, 0x401, 0x8, 0x8, 0x10, 0x80000000}, {0x5, 0xfffff125, 0x3ff, 0x1, 0x10, 0x1000}, {0x63a, 0x3, 0xff, 0x0, 0x43654d23, 0x80}, {0x8000, 0x3, 0x2, 0xf, 0x7, 0x5}, {0xbdf, 0xd, 0x14000000, 0x3, 0x0, 0x3}, {0x5, 0xa, 0x4, 0x3, 0x7140756a, 0x8001}, {0x4, 0x1, 0x1ff, 0x0, 0x80000000}, {0x3e5, 0xa, 0xffffffff, 0x3ff, 0x0, 0x7}, {0x100, 0xfffffffa, 0x708, 0x101, 0xc, 0x3db7}, {0x5, 0x0, 0x7fff, 0x9, 0x4, 0x8000}, {0x7f, 0xcd, 0x80000001, 0x47, 0xffff, 0x401}, {0x7, 0xfffffffa, 0x401, 0xffffffff, 0x6, 0x2}, {0x9, 0x6, 0x80000000, 0x2, 0x1ff, 0x400}, {0x0, 0x6, 0x7f, 0x3, 0x8, 0x8000}, {0xfbd7, 0x4, 0x800, 0xd56, 0xb84, 0x2}, {0xffff, 0xffffffff, 0x6, 0x6b49, 0x8, 0xc257}, {0x46a, 0x0, 0x6, 0x400, 0x2, 0x2}, {0xf, 0x800, 0x0, 0xffffffff, 0x1, 0x4}, {0xbf3, 0x4, 0x5c, 0x1, 0xb, 0x800}, {0x9, 0x401, 0x5, 0x6, 0x6, 0xc}, {0x5, 0x3, 0x962, 0x6, 0x10001, 0x8a}, {0x1, 0x6, 0x9, 0x80000000, 0x7304, 0xfc7}, {0x1, 0xe333, 0x8cc, 0xbf24, 0xda69, 0x9}, {0x14000000, 0x8, 0x1, 0xfffffffa, 0x0, 0x10}, {0x81, 0x7ff, 0x3ff, 0xa4c, 0x28ae4000, 0x4}, {0x1, 0x80, 0x4, 0x3, 0x3, 0x2}, {0x1, 0x3ff, 0x1, 0x1, 0x4, 0x2}, {0xfffffffb, 0x1, 0x5, 0x2, 0x0, 0x4a49}, {0x7fff, 0xfffffff7, 0x2, 0x2, 0x2, 0x6}, {0xfffffff7, 0xcd2, 0x1, 0x7, 0x9, 0x5}, {0x4, 0xf4, 0x8, 0x1, 0x2, 0xffff}, {0x9e5, 0x8, 0x1, 0x7, 0x7, 0xb001}, {0x8, 0x7000000, 0x7, 0x1, 0x80000000, 0x3}, {0x32, 0x7fffffff, 0x9, 0x8, 0x3}, {0xfffffff9, 0x2, 0x2, 0x3, 0x8, 0x2}], [{0x4}, {0x6, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x68179a468b3bf65}, {0x4}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1}, {0x2}, {0x5}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x5}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xc, 0x200, 0x3, 0x7543, 0x7}, 0x6, 0xc2, [{0x5, 0x1, 0x9, 0x6, 0x8, 0x1c00}]}, [{0x1, 0xe, 0x2, 0x7, 0x80000000, 0x28}, {0x1263eedb, 0x4, 0xca0, 0x80000000, 0xd708, 0xbb}, {0x5, 0x1, 0x6, 0x7fff, 0x8d2, 0x5}, {0xd, 0x0, 0x20, 0x48f7, 0xc258, 0x10000}, {0x4, 0x3, 0x3, 0x6, 0x9, 0x8}, {0x4, 0xfffffff7, 0x6, 0xf1d6, 0x1, 0x79993ee}, {0xfffffff9, 0x7, 0xff, 0x48b, 0x8, 0x40}, {0x0, 0x7fa, 0x5, 0x3, 0xaa, 0x2}, {0xd2, 0x3, 0x8, 0x9, 0x7, 0x7}, {0x8, 0x6, 0x9, 0x101, 0xe, 0xfff}, {0x6, 0x7f3b, 0x5, 0x81, 0x2, 0x8}, {0xfff, 0x5, 0xffffe249, 0xcc1000, 0x4, 0x4}, {0x1000, 0x4e, 0x6, 0x0, 0x9, 0xb6}, {0x4, 0x4, 0x5, 0x6a, 0xf8, 0x1}, {0x6, 0x55780d96, 0xfff, 0x80000000, 0x8000, 0x2}, {0x8, 0xfffffffc, 0x7, 0x1, 0x3, 0xf}, {0x2888, 0x3, 0x4, 0x2, 0x0, 0x5}, {0x1, 0x3, 0x2, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x400, 0x850, 0x1, 0x7b43}, {0x15, 0x7, 0x0, 0x6d, 0x9, 0x1}, {0xf9, 0x0, 0x9, 0x3, 0x3ff, 0xa517}, {0x3, 0xdd, 0x7, 0x8, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x1, 0x6}, {0x3, 0x8, 0xfffffc00, 0x3, 0x4c, 0x200}, {0x8, 0x5, 0x0, 0x6b, 0x10001, 0xd}, {0x3, 0x6, 0x1, 0x9, 0x1, 0x956}, {0xffff, 0x4, 0x7, 0x100, 0x0, 0x21a}, {0x2, 0x7, 0xfffffffc, 0x800, 0xba4, 0xfffffffa}, {0xa, 0x18, 0xb, 0xffffffff, 0x238, 0xd3}, {0x1, 0xa441, 0x4, 0x4, 0x3, 0x61c2}, {0x4, 0x7ff, 0x885a, 0x3, 0x2, 0x4}, {0x8, 0x0, 0x80, 0x3, 0x9fe, 0x3}, {0xffffffff, 0x4, 0x2, 0xaa, 0x2, 0x6}, {0x101, 0x8, 0x71, 0x7, 0x2}, {0x3, 0xfffffffa, 0x3, 0x3, 0xa, 0x2a020000}, {0x2, 0x6, 0x6, 0xedb, 0x82, 0x2}, {0x10000, 0x8, 0x4, 0x401, 0x7, 0x8edd}, {0x101, 0x40, 0x7fff, 0x200, 0x7, 0x40}, {0xac, 0xffffffff, 0x7, 0x3ff, 0xf, 0x100}, {0x101, 0x188d, 0xfe8, 0x3, 0x80000001, 0xd}, {0x8, 0x1, 0x1, 0x9, 0x5e0, 0xa}, {0x4, 0x7217, 0x4, 0x2, 0xfffff001, 0x8fa5}, {0x4, 0x2795, 0x5, 0xeaaa, 0x5a3, 0x7f}, {0x7, 0x24ccc065, 0x2, 0xb58f, 0x8, 0x6}, {0x0, 0xb2, 0xb9, 0x2, 0x10001}, {0x2, 0x2d80, 0x9, 0x2d, 0xce40, 0xffff}, {0x6fdfd49c, 0x4, 0x48f0, 0x9, 0x9, 0x9}, {0x98e7, 0x5, 0x2, 0x401, 0x7, 0x3}, {0x881d, 0x73, 0x7bd2, 0x3ff, 0x52e, 0xfffffffd}, {0xffff, 0x5, 0x6, 0x5, 0x0, 0x5}, {0xffff0000, 0xfffffff5, 0x4f4f, 0x1, 0xfff}, {0x5, 0x2, 0x1, 0x5, 0xffffffc0, 0xfff}, {0xfffffc00, 0x68, 0x7fffffff, 0x4, 0xcca, 0x3ff}, {0x2, 0xffffffff, 0x7, 0x9, 0xd8, 0x9b87}, {0x80, 0x0, 0x1, 0x2, 0x4, 0x4}, {0x4, 0xfffffffb, 0x10, 0x5, 0xa, 0x5a}, {0x9, 0x6, 0x7979, 0x8001, 0x101, 0xfffffff2}, {0x4, 0x7fff, 0x9, 0x4, 0x324, 0x4c67}, {0xc, 0xc, 0x401, 0x7f, 0x1000, 0x101}, {0x0, 0x89, 0x6c5, 0x6, 0x776ddd97, 0xe}, {0x4, 0x46, 0x2, 0x1cc, 0x6584ec95}, {0x9, 0x956, 0x200, 0x58a8, 0x4, 0x5}, {0xd59, 0x2, 0x6, 0x3, 0x22908dcc, 0x5}, {0x5, 0x6, 0x4, 0x1, 0x40, 0x200}, {0xfffffffd, 0x6, 0x8001, 0x9, 0x4, 0x9}, {0x6, 0x3, 0x100, 0x8000, 0x325}, {0x10, 0xd5a, 0x7, 0x100, 0x100}, {0x20, 0x800, 0x8, 0x7, 0x1479, 0x2}, {0x2, 0x8104, 0x800, 0x16f, 0x81, 0x3}, {0x80000001, 0x0, 0x1, 0x7e1ff429, 0x6, 0x2}, {0xb109, 0x4, 0x6c, 0x7, 0x2, 0x3}, {0x6, 0x1, 0xe4d, 0x1, 0xffff, 0xdae}, {0x3, 0xa, 0x1, 0x9, 0x1, 0x800}, {0x3, 0xfb5, 0x4, 0xa72, 0x6, 0x7}, {0x0, 0x294, 0x8d, 0x6, 0xf568, 0x167c}, {0x5, 0x4, 0x0, 0x3, 0x0, 0x7fff}, {0x101, 0xd6f2, 0x6, 0x958, 0x0, 0xfff}, {0x9, 0x5, 0x8, 0x5, 0x2, 0x8}, {0x2, 0x400, 0x3, 0x10001, 0xe0000, 0x7}, {0x2, 0x3, 0x2, 0x3, 0x4, 0x6}, {0x6, 0x7f, 0x5, 0x5, 0x4, 0x4}, {0xfffff6ae, 0x100, 0x80000001, 0x7, 0x6, 0xfffffffd}, {0x6, 0x1, 0x8, 0x1, 0x1, 0x8001}, {0x10, 0x36, 0x9, 0xfffff000, 0x6, 0xdce}, {0x2, 0x5, 0xfffffff9, 0x9, 0x6, 0x80000001}, {0x9, 0x401, 0xffffffff, 0x59ff0925, 0xfffffffb, 0x8}, {0xd80c, 0x9, 0x0, 0x10, 0x0, 0x4}, {0x9, 0x2, 0xd, 0x3, 0x63, 0x481}, {0x9, 0x6, 0x4, 0x6, 0x3, 0x7}, {0xb, 0xa, 0x8, 0x6, 0x8, 0x9}, {0x2, 0x0, 0x2, 0x9, 0x4, 0xfffffffd}, {0x9, 0x3, 0x2, 0x2, 0x0, 0x1}, {0x6, 0x2, 0x6, 0x5, 0x6, 0x800}, {0x8, 0x1, 0xf9a, 0x597, 0x4}, {0xfff, 0x1, 0x5, 0x1, 0x3, 0x3}, {0xb8, 0x800, 0x4, 0x285b6bc3, 0x4, 0x7}, {0x80000000, 0xfffffbff, 0x4, 0xc, 0x10, 0xd2}, {0x80000001, 0x6, 0xfffffff5, 0x0, 0x13, 0x2}, {0x1000, 0x480, 0x9a, 0x0, 0x10000, 0x6}, {0x7, 0x0, 0x81, 0x3, 0x7afc5381, 0x9}, {0xa, 0x2, 0x1fe1, 0x8, 0x8, 0x5}, {0x5, 0x7, 0x80000000, 0x8, 0x1, 0x81}, {0x9, 0x2f0, 0x5, 0x6, 0x2, 0x6}, {0xfffffff1, 0x6, 0x1, 0x8, 0x5, 0x7}, {0x2, 0x5, 0x0, 0x9, 0x2}, {0xffffffff, 0x86, 0x74e8, 0x1cf59124, 0x18b606d}, {0x1, 0x6, 0x3, 0x4, 0x4, 0x7}, {0x4, 0x7, 0x8, 0x2, 0xb, 0x7}, {0x9, 0xfffffff8, 0xab, 0xfff, 0x8, 0x7}, {0xfffffeff, 0x8, 0x2, 0x83e, 0x8, 0x4}, {0xffffffff, 0x1, 0x81, 0xfffffffa, 0xb8, 0xfffffffe}, {0x7, 0x1ff, 0x7, 0x3, 0x992, 0x1ff}, {0xd98, 0x7f, 0x5, 0x7, 0x0, 0x100}, {0x0, 0x3, 0x1, 0x8, 0x80, 0x180000}, {0x6, 0x2, 0x81, 0x101, 0xffff, 0x2}, {0xba04, 0x6, 0x5, 0x6, 0xa7, 0xd9}, {0x1, 0x3, 0xf, 0x0, 0x4, 0x5}, {0xd, 0x4, 0xffff80a4, 0x4, 0x8}, {0x9, 0x5, 0x0, 0xfffffe00, 0x9, 0x3}, {0x800, 0x2, 0x10000, 0x4f7, 0xfffffffa, 0x3}, {0x7984, 0x2, 0xcef8, 0x10001, 0xc9, 0x4}, {0x0, 0x8, 0x83, 0x671, 0x5, 0x6}, {0x5, 0x80, 0xffff943a, 0x1, 0x3, 0x3}, {0x4, 0x2, 0x2, 0x1, 0x5, 0xeb}, {0x10, 0xff, 0x3ff, 0x5, 0x49, 0x2}, {0x10001, 0x7, 0x2, 0xffffff58, 0x3, 0x2cc}, {0x0, 0x0, 0x0, 0x9, 0x4568acb0, 0x80000000}, {0x5, 0x200, 0x5, 0x9, 0x7, 0x8}], [{0x1, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x3}, {0x5}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}, {}, {}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {}, {}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x5}, {0x5}, {}, {0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x7, 0x8, 0x8, 0x7d16, 0x7}, 0x3, 0x2, [{0x3ff, 0x7f, 0xfa1, 0x100, 0x5, 0x7}, {0x7, 0x8, 0x3, 0x0, 0x9, 0x10001}]}, [{0x7fffffff, 0x8, 0x80, 0x8, 0xc36f, 0x1}, {0xfffffff0, 0x7, 0xffffffbe, 0x0, 0x8000, 0x1}, {0xffff7fff, 0xfffffff6, 0x451, 0x80000000, 0x43, 0x9}, {0x8, 0x6, 0x4, 0xc, 0x80000001, 0x1}, {0xf, 0x3, 0x10001, 0x685a2974, 0x2, 0xcf89}, {0x458f, 0x2, 0x400, 0x10, 0xc204, 0x5}, {0x56, 0x80, 0xffffff01, 0x7a1, 0x4, 0x9}, {0x1, 0xf4, 0x87a, 0x47, 0xd996, 0x11}, {0x3, 0xfffffffa, 0x1c, 0x1000, 0x8, 0x4}, {0x1, 0x2, 0x7641, 0x200, 0x2, 0x7ff}, {0x6, 0x40, 0x9, 0x4, 0x3788, 0x1c}, {0x7ff, 0xfffffffd, 0x6, 0x3702, 0x4, 0xa857}, {0x195a, 0x0, 0x81, 0x8, 0x5, 0x6}, {0x9baf, 0x7, 0xefcf, 0x7, 0x14ee, 0x2}, {0x5, 0x2e00000, 0x9, 0x401, 0x4, 0x8}, {0x0, 0x4, 0xb, 0xfffffffa, 0x4, 0xfffffff8}, {0x4, 0xe, 0xe10, 0xfffffffe, 0x6, 0x100}, {0x7, 0x9, 0x0, 0xfff, 0x7}, {0x0, 0xe0000, 0xffff, 0x6b2, 0x2, 0x2}, {0x9, 0x5, 0xfffffffc, 0x0, 0x8, 0x80000000}, {0x66, 0xe74a, 0xdb, 0x7, 0x4158678f, 0x3}, {0xffff9b98, 0x101, 0x3, 0x3bbf, 0xfffffff7, 0x8000}, {0x4599, 0xe7, 0x6, 0xffff, 0x7, 0x6}, {0x1, 0xfffffffd, 0x7, 0x8, 0x8}, {0x80, 0x40, 0x6, 0x79600000, 0x7, 0xbff}, {0xff, 0x8, 0x2, 0xe4e9, 0x4, 0x2}, {0x2, 0x3, 0x4, 0x0, 0x24, 0x101}, {0x3, 0x4, 0x2, 0x6, 0x9, 0x6}, {0x8000, 0x3, 0x5, 0x4, 0x1}, {0x3, 0x0, 0x40, 0x92cf, 0x7, 0x3ff}, {0x9, 0x4, 0x7, 0x6, 0x4, 0xa0d}, {0x26c, 0xfff, 0x800, 0xb57e8000, 0x3, 0x342}, {0xfff, 0x5, 0x6bdfb422, 0x1, 0x8000, 0x2}, {0x5, 0xfff, 0xff, 0x4, 0x7, 0x4}, {0x4, 0x4, 0xff, 0x3, 0xaf7, 0x510e}, {0x8, 0x1, 0x61f595da, 0xffffffff, 0x5, 0xff}, {0xfffffff3, 0x6, 0x9, 0x3, 0xffffffff, 0x7}, {0x7ff, 0x6, 0x5, 0xfff, 0x5, 0xa0}, {0x6, 0x3, 0x7, 0xfffffffb, 0x0, 0xffff}, {0x3, 0x6, 0xe, 0x2, 0x2, 0x401}, {0x1, 0x1, 0x8c, 0x3, 0x2, 0x7}, {0x7, 0x4, 0xfffff001, 0x9, 0x8001, 0x7}, {0x1e2, 0x0, 0xb, 0x6ff, 0x4, 0x8}, {0x10001, 0x7fff, 0x1, 0xfffffff7, 0xe, 0x81}, {0xffffffff, 0xfffffffc, 0x3ff, 0x0, 0x3, 0x8}, {0x0, 0x3, 0x4, 0x7, 0x6, 0x3}, {0x64, 0x3, 0x1, 0xac, 0x5f, 0x3}, {0x5, 0xd7, 0xb, 0x7, 0x4, 0x275}, {0x1f, 0x10000, 0x40, 0x5, 0x200, 0xff}, {0x80000000, 0x7, 0x0, 0x5, 0x7ff, 0x6000}, {0x5, 0x3, 0x1, 0x1, 0xffffdd8e, 0x9}, {0x6, 0x8, 0x2afc, 0x2, 0x9, 0x40f4}, {0x4, 0x401, 0x57, 0xffff, 0x3, 0x7}, {0x3, 0xffffffff, 0x2, 0xffff, 0x1, 0xf}, {0x6, 0x9, 0x1000, 0x81, 0x1, 0x2}, {0x4, 0x0, 0x997, 0x5f6b2945, 0x5, 0x8000}, {0x1, 0x100, 0x8, 0x5ef609d0, 0x100, 0x3a30f4b3}, {0xc2fa, 0x0, 0x16, 0x7, 0x8, 0x4}, {0x3, 0x1, 0x7, 0x100, 0x200, 0x9}, {0xa8, 0x40, 0x7, 0x400, 0xff}, {0x1, 0x9, 0x5, 0x0, 0x7}, {0x7fffffff, 0x3, 0x6, 0x8, 0x5, 0x2}, {0x9, 0x5, 0x10000, 0x4, 0x8001, 0x7}, {0x8, 0x5, 0x0, 0x5, 0xa4d8, 0xe}, {0xb, 0x9, 0x8, 0x4ae, 0xe759, 0x1}, {0x5, 0x2, 0x1, 0x8d1, 0x5}, {0x7, 0x4, 0x0, 0x4b, 0x6, 0x10000}, {0xae6, 0xe, 0xf, 0xff, 0x7, 0x3}, {0x2, 0xffff, 0x885, 0x5, 0xffffffff, 0x2}, {0x7, 0x5, 0xe5, 0x6, 0x1, 0xbf}, {0xffffffff, 0x1ff, 0x2, 0x3, 0x5, 0x9}, {0xfffff801, 0x46838d01, 0x7, 0x5, 0x4, 0xc}, {0x1, 0x1, 0x6, 0x4, 0x7, 0x1}, {0x0, 0x5, 0xa0000000, 0x1, 0x2, 0xdf}, {0xfffff2be, 0x8, 0x6, 0x6, 0x8, 0x7}, {0x9, 0x5897, 0x46c, 0x4, 0x3, 0x9}, {0x800, 0x7, 0x0, 0x6, 0x2, 0x8}, {0x10, 0x2900, 0xfa, 0xffffff7f, 0xffffff0b, 0x1}, {0x9, 0xf9, 0x8, 0x1, 0x7, 0x10}, {0x1000000, 0x464, 0x2, 0x4d, 0x4, 0x7ce}, {0x8001, 0x0, 0xd, 0x6, 0x6, 0x80}, {0x7fff, 0x6, 0x3, 0x1, 0x5}, {0x0, 0x4, 0x4, 0x5, 0x9, 0x156}, {0x8, 0x7, 0x400, 0x0, 0xffff, 0xe}, {0x3, 0x3, 0xffffffc9, 0x7, 0x0, 0x3}, {0x9, 0x2, 0x1ff000, 0x4, 0x7, 0x7fff}, {0x7fff, 0x5, 0x3, 0x800, 0x5, 0x6}, {0x7, 0x5, 0x5, 0x6, 0x10000, 0x60a}, {0x0, 0xffffffe8, 0x3, 0x7ff, 0xc8, 0x80000001}, {0x6, 0xfffffc01, 0x2, 0x5, 0x3, 0x353400}, {0x4, 0xffffff51, 0x2, 0xff, 0xf, 0x7}, {0xfe28, 0xfffffff8, 0x80, 0x0, 0x7, 0x87}, {0x7, 0x1000, 0xbbd, 0x401, 0x4, 0x9}, {0x6, 0x4, 0x3, 0xdc0, 0x3, 0x537b}, {0x0, 0x0, 0xffffffe0, 0x0, 0x0, 0xfffffffa}, {0x9, 0x3, 0x9, 0xffffff80, 0x4fbd9e58, 0x7}, {0x7ff, 0xc, 0x0, 0x0, 0x91b3, 0x4}, {0xdd25, 0x4, 0x8, 0xfffffff8, 0x0, 0x8}, {0x80000000, 0x6, 0x10000, 0xfffffff7, 0x0, 0x3}, {0x800, 0x8, 0x94d6, 0x8e28, 0x8000, 0x2a}, {0x6, 0x7, 0x8, 0x2, 0x1, 0x2}, {0x5, 0xc, 0x7ff, 0xff, 0x6, 0x9}, {0x8000, 0x7, 0x8, 0xc, 0x3, 0x5}, {0x17, 0xffff, 0x4, 0x5, 0x10000, 0x6}, {0x4, 0x5, 0x3, 0xfffffc01, 0xc60d, 0x5b35}, {0x7, 0x2, 0x5, 0x4, 0x3, 0x9}, {0x4, 0xa, 0x1c18, 0x7, 0xd18, 0x6}, {0x8, 0x3, 0x4, 0xfffffff9, 0x6, 0x7}, {0x81, 0x5, 0x2cd, 0x2, 0xbb, 0xa}, {0x4f, 0x4, 0x9, 0x7, 0xa5, 0xfffffff8}, {0xd8e2, 0xa, 0x1, 0x8, 0xfa3f, 0x9}, {0xcb, 0x2, 0x23, 0x8, 0x7, 0x6}, {0x4, 0x4, 0x8, 0x2d89729e, 0x7fffffff, 0x6}, {0x1, 0x0, 0x7, 0x80, 0x6, 0x2}, {0xfffc, 0xf91, 0x6, 0x7ff, 0x7936fda6}, {0x7, 0x0, 0x7ff, 0x1, 0x10, 0x5}, {0x7, 0x4, 0x4, 0x40004, 0x0, 0x9}, {0x2, 0x8, 0x2, 0x1000, 0x1, 0x3}, {0x4, 0x100, 0x8000, 0x2, 0x1, 0x9}, {0x10000, 0x800, 0x5, 0x9, 0x0, 0x6}, {0xff, 0x7, 0x101, 0x8, 0x1, 0xfffffff8}, {0x7fffffff, 0x7ff, 0x4, 0x6, 0x7fff, 0x9}, {0x5, 0x2, 0x4, 0xffffff80, 0x4, 0xfffffc00}, {0x3, 0x0, 0x800, 0x2, 0x3, 0x9}, {0x7, 0xfffffff7, 0x23f, 0x7ff, 0xb, 0x5}, {0x0, 0xd, 0x100, 0x8, 0x6b89, 0xa9}, {0xdf06, 0x8, 0x6, 0x8, 0x5, 0x55}, {0x6, 0x6, 0x3, 0x1, 0x5, 0x4}], [{0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x530abdafa5e08e5d}, {0x2}, {0x5}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x6}, {0xce4633eb2886dc9b}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x5}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x1}, {0x1}, {0x1}, {0x1}, {0x7, 0x79bbe4ba85bba9fc}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {0x2}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x4}, {0x2}, {0x5}], 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x104, 0x13, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x6, 0x40, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x3, 0x20000000, 0x582c, 0x7}, 0x3, r5}}]}, {0x98, 0x6, "df1d0781260e01f5f70b79b2fb5b44f23ac391ca1c32ea646a8159d7f0e1547a2b92a966d1cdf25a4547991b7377d32c3b0378e06f044b46a3386f3f01c9be7a908231c5fea9e521ade70854e542ecf1330cc687e290891c86de5bebccab97998b89a73d178f2a97cef58458beb1d288b7d3b691b7aa28e64760b72b965f6f78cb12a0887c462ae5c90adb61a15e4e64c3481316"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x214, 0x19, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7ff, 0x10000009, 0x4}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x2, 0xfffffff7, 0x3}, @multicast2, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7f, 0xffffffffffffffff, 0x401, 0xfffffffe}, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff7, 0x10, 0x4, 0xfffffff7, 0x200}, @remote, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x86, 0x3, 0x37be, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8001, 0x2, 0x10000000, 0xfffffffa, 0xd}, @remote, @multicast2, 0xffffffff, 0x1}}]}, {0xfa, 0x6, "4cbd76f1e059ba54389f3cadf99eedb84cc442fea2375c531faa6672dfa56cb5d888f43c2c4767e957f73ebbf8022675531f6047bc36d49162c7f345d491c728887d8288936829da0144ba297408314a7782b6aab276332769cf108da2a071fc9881e2ecd4a6ce8c040004dca2f45aaeecfbbec2ec3c9c903d13061cc774f8049e117dcd55473be9c4526238fa6313fee6a6da4dad909345dbda0bd3d8203bdefbbd7d34a7cbe9879fea878d671e706f3f44cf103ff2be5d5b4e6a36ca136493359678580087068b7ad225a8d441a1a845bef6a3aa3229db5ef98a7ef12822d599ea7ea5ed1705eb868eeb52858e14d30ded0c77bc0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0xe0, 0x4, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x81, 0x6, "b4c57f2d85e717cb94b1659a93e9a1e1f1ba1758ebfa9b7ad8c90ec0194c74b9cedeb662ea9145ec79d38e6f46682772ceaa270ed63d7cc62f8bb62dfe214be8b141d2a3dca90d594f40ed5276adeea91a4d0eee17a3d81965d0c74a382769fdd85105befbe7ce420f24dca3e010fcf432d9f38002da808cd218316a71"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x164, 0x6, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x80000001}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x17}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x103, 0x6, "257b6a7835d687159e0721e2c24c501fa0e8955b4823bf8bfe231184cafa9c46f3b79599f439689015d30318eeac1621fd61c85d70eb592fab166483946ed9b8011e4d92367eeda4dfd58e46dd81bd43a39996217d9f2178c96ad5ff4056d3f54f52a94117e14ab0474900e3dae030ffbad4cf89896fb40cbc5d86cce5a2c2beddf485df7c75e681052d2933532b16750979e93b0664457ed65cfc27db3502e1b5650952ac7858fde0b35a673aa8c5eaa23ab9966ac92af1a30c4dd07417cf16342c11980943f1791d696567e41064eeaa071d7c4c787d8f9a08101968f3fbd862d3a402418648496124b05d0a4063049f3cb492d808441c56dc266e27deed"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x90c, 0xe, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xfffffffa, 0x3, 0x9, 0x9, 0xd, 0xbf, 0x9, 0xff44, 0x2, 0x1000, 0x0, 0x7f4, 0x1, 0x6, 0x4, 0x0, 0x9, 0x8000, 0x900000, 0xf, 0x2, 0x0, 0xdde3, 0x9, 0x1000, 0x3, 0x0, 0x7, 0x4, 0x4, 0x9, 0x7, 0x8, 0x12, 0x7, 0xb6, 0x0, 0x4, 0x8c, 0xfffffff9, 0xffff, 0x7, 0x1eed, 0x401, 0x2, 0xb0, 0x0, 0x5b38, 0x3, 0xffff, 0x4, 0x97, 0x0, 0x6, 0x8, 0x401, 0xd, 0xffffffff, 0x0, 0x9, 0x4, 0x3ff, 0x0, 0x8, 0x3, 0xfffffffc, 0x94, 0x9, 0x7f, 0xcaa1, 0x8, 0xde, 0x3, 0x2, 0x3, 0x8000, 0x9, 0x5, 0x400, 0x0, 0x8, 0x80000000, 0xeb, 0x59, 0x0, 0x2, 0x6, 0x2, 0x12c, 0x8, 0x2, 0xa, 0x8000, 0x8e, 0x2, 0xd, 0x8, 0x1, 0xa4, 0x6, 0x1, 0x1f, 0x773c944c, 0x2, 0xc, 0x3, 0x1, 0x27f, 0x8, 0x2, 0x40, 0x1, 0x3, 0x401, 0x90000, 0x3, 0xf, 0x8, 0x6, 0x8, 0x8, 0x3, 0xf689, 0x9, 0x1, 0x2, 0x2, 0x8000000, 0x6, 0x5, 0xc36d, 0x9, 0xffffff80, 0x400, 0x7fffffff, 0xffff, 0x40e1a820, 0x9, 0x100, 0x1, 0xffffffff, 0x7, 0xd, 0x2, 0x1, 0x5, 0x70b4, 0x4, 0x8001, 0x8001, 0x0, 0x8, 0x9e9, 0x0, 0x1, 0x0, 0x75b, 0x3, 0x7, 0x6, 0x3, 0xa77c, 0x0, 0x800, 0xe, 0x7fffffff, 0x6, 0x3, 0x5e99, 0xffffffff, 0x9, 0x1, 0x6, 0x88e9, 0x90, 0x8000, 0x2, 0x9, 0x9, 0x3, 0x80000001, 0x3ff, 0xd79, 0x81, 0x4, 0x8000, 0x7, 0x4, 0x80, 0x5, 0x7, 0x7f24, 0x5, 0x2, 0x0, 0x9, 0xf2, 0x3ff, 0x6190, 0x9, 0x7df, 0x1, 0x40, 0x0, 0x6, 0x9b, 0x2f, 0x3, 0x25ae1958, 0x4, 0x800, 0x0, 0x2, 0x8, 0x8, 0x2, 0x3, 0xc, 0x2, 0x2, 0x75ee, 0x7, 0xfff, 0x26d, 0x7, 0x1, 0x81, 0x2a4d, 0x1, 0x3, 0x1, 0x9, 0xfffffffd, 0xfffffff7, 0xfffffff3, 0xfffffff8, 0x9, 0x2, 0x5, 0x2, 0x2, 0x10000, 0x8, 0xd, 0x7ff, 0x9, 0x0, 0x10001, 0x83, 0x4, 0x4c28, 0x9, 0x8, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff5a}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa0}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x7, 0x9, 0x7, 0x5b32, 0x4, 0x101, 0x91, 0x7, 0x9e, 0x3, 0x2, 0x1, 0x81, 0x2, 0x0, 0xfffffffd, 0xffffff96, 0x8, 0x1, 0x6, 0xffffffff, 0x1, 0x19, 0x1, 0x3, 0x7, 0x3, 0x5, 0x0, 0xe8, 0x5, 0x9, 0x4, 0xfffffff6, 0x7, 0xd6f0, 0x8000, 0x4, 0xfff, 0x9, 0x1, 0x0, 0x1ff, 0xf7, 0x8b1d, 0x7, 0x40, 0x4, 0x3, 0x48ad9610, 0x10000, 0x50dd, 0x1, 0xfffffeff, 0x80000000, 0x4, 0xde9, 0x4, 0xf, 0x33, 0x6, 0x7f3, 0x6, 0x9, 0x8, 0x3, 0x5, 0x0, 0x7, 0x8, 0x1, 0x9, 0x4e, 0x400, 0xd94, 0x3ff, 0x101, 0x8, 0x0, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x1ff, 0x27badb3a, 0x0, 0xff6, 0x98, 0x1, 0x932, 0x7ff, 0x7, 0x7fffffff, 0x7, 0x6, 0x4, 0x7, 0x7f4, 0xd, 0x3, 0xfffffff0, 0x1, 0x2, 0xa, 0x4, 0x1, 0x9, 0x5, 0x0, 0x9, 0xfffffc00, 0x4, 0x0, 0x1, 0x8, 0x4, 0x1, 0x7, 0x6, 0xffff8001, 0x1, 0x80, 0x0, 0x100, 0x2, 0x2, 0x8000, 0x3, 0x426, 0x80000000, 0x4, 0x101, 0x6, 0x7, 0x80000001, 0xfff, 0x0, 0xff, 0x1, 0x2, 0x3, 0x8, 0x4, 0x6, 0x1, 0x3, 0x6, 0xffff, 0x2, 0xb1, 0x5, 0x1, 0x3, 0x7, 0xc9, 0x4, 0x2, 0x8, 0x2, 0x80, 0x101, 0x1, 0x9, 0xfffffff9, 0x4, 0x8000000, 0x2, 0x42, 0x6, 0x0, 0x0, 0x8, 0x1000, 0xfffffe00, 0x7, 0x7, 0xfffff001, 0x8, 0x40, 0xee, 0xfffffffe, 0x1, 0xffffeb15, 0x6, 0x3, 0x7, 0x5, 0xff, 0x6d9, 0x9, 0xf59, 0x0, 0xfffffff8, 0xa8c, 0x7ff, 0x81, 0x9, 0xffffffff, 0xfffffd11, 0x6, 0xe98, 0xa, 0x100, 0x81, 0x0, 0x2, 0x5, 0x9, 0x80000001, 0x1, 0x1, 0x6, 0x401, 0x0, 0x7, 0xffff, 0x3, 0xe, 0x9, 0x2, 0x2, 0xb91, 0x6, 0x200, 0x8, 0x7fffffff, 0x5, 0x1ff, 0x2, 0x8, 0x1, 0x3, 0x59, 0x40, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x2, 0x5, 0x4, 0x1, 0x2, 0x2, 0xd, 0x2, 0x8, 0xfffffff8, 0x9, 0x9, 0x11, 0xffffffff, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xee10}]]}, {0xb4, 0x6, "3f67cd8cf1b9332a731eec0947ef67f1caafb81242e6e37a0b6eb7f31062d0555b8b4d896ce5f967d3ca8bee67f0a7cfe66aa44b9a4b23b2def6520bd3a3278ecf0de5192a92a4f1359453169f20dbb713e90e14ab8d330337897f138d80bb35d4b8e2a251f5b410f6163cfe176f3924e4bb18dd758f2fb0010fe0c09eb6ee21670af0a3cbb6620c94d8c956b66cedd59450e7a9aa0dda92556566a70b3c370d2fd3db477c2c04dd1445eebec7e01bb3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x646d73ff4ac4bac1, 0x2}}}}, @m_csum={0x120, 0x8, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x2, 0xf, 0x5}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0x7, 0x11}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x1, 0x7, 0xffffffff}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x17d9, 0x3f6c814ccbbe6534, 0xfffffffe, 0x3}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x37, 0xffffffffffffffff, 0x2}, 0x50}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff, 0xc7, 0x8, 0x8001}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7fffffff, 0x20000000, 0xe, 0x2}, 0xe}}]}, {0x2e, 0x6, "802004d22f26c1feef1eada7bf310dc88fcfa38c403fb39381c1b1d0e2b5d4b2818249cb615e147c6b1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x58}, @TCA_ROUTE4_POLICE={0x103c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x32b04eea, 0x1, 0xe, 0x5, 0x5, 0x5, 0x0, 0x6292, 0x5, 0xf, 0x9, 0xf7, 0x8, 0x0, 0x8, 0x5, 0x42f, 0x57f, 0x9, 0x8, 0x5, 0x10, 0xfff, 0x4, 0x7, 0x7, 0x800, 0x5, 0x9a1, 0x1, 0xd, 0x3, 0x89, 0x10001, 0x7950, 0xe1be, 0x2, 0x5, 0xc, 0x7, 0xef7a, 0xfffffffa, 0xa8, 0x9, 0x4, 0x4, 0xfffffffb, 0x200, 0x5, 0x3, 0x584b, 0x13, 0xfffffffd, 0x1, 0xffffffc0, 0x9, 0x7, 0xd, 0xa6ee, 0x3, 0x3, 0xd2, 0x0, 0x5d84, 0x200, 0x35c9, 0x7, 0xff, 0x34, 0x1, 0x400, 0x2, 0x7f, 0x79d, 0x1, 0x6, 0x5, 0xe, 0x7fff, 0x8, 0x8, 0x5, 0x2, 0x24a, 0x7, 0x9, 0x7, 0xfd, 0x1, 0x7, 0x2, 0x151, 0x6, 0x37, 0x1, 0x4, 0xe, 0xffff, 0x10000, 0x4, 0xfffffffb, 0x7966, 0x776, 0x2, 0x1, 0x8, 0x3, 0x5, 0x7fffffff, 0xffff, 0x4, 0xfac, 0x8, 0x4, 0x6, 0xfffffffb, 0x8, 0x9, 0x0, 0x6e4b618d, 0x3, 0x7f, 0xfffffff8, 0x0, 0x5c1edb23, 0x2, 0x32d, 0x3, 0x1e, 0xffffffff, 0x9, 0x1ff, 0x401, 0x9, 0x0, 0x1, 0x7, 0x7, 0x64c, 0x7, 0x4, 0x1ff, 0x7ff, 0x9, 0x7ff, 0x1, 0x6, 0x8, 0x787, 0x30f, 0x0, 0x7, 0x3, 0x7f, 0xff, 0x1000, 0xfffffffd, 0x1, 0x2, 0x4, 0x0, 0x2, 0x10001, 0x8, 0x7cf, 0x8, 0x401, 0x1, 0x5, 0x7, 0x5dd5, 0x1, 0x0, 0xb, 0xff, 0x80000001, 0x4, 0xc, 0x6, 0xf, 0x2, 0x3, 0x7f, 0x80, 0x3, 0x2, 0x4, 0xffffff43, 0x10, 0x8, 0x800, 0x4, 0x4, 0x8, 0x8, 0x800, 0x8cf4, 0x1, 0x3, 0x8, 0x44, 0x5, 0x85, 0xb84c, 0xfffffff4, 0x7, 0x5c0, 0xfff, 0x3ff, 0x7, 0x9, 0x0, 0x3, 0x8, 0x2, 0x8000, 0xf0, 0x10001, 0x92, 0x8, 0x5, 0x4, 0x5, 0x8, 0x4a1, 0x1, 0x59fb, 0x0, 0x2d, 0x2d2, 0x7, 0x0, 0xfe, 0x380, 0x0, 0x4, 0x4, 0xfffffffe, 0x7359, 0x0, 0xfffffff2, 0x7, 0x3, 0x3, 0xb, 0xe, 0x4, 0x7, 0x6, 0x4, 0x92d, 0x1, 0x10000, 0x9, 0xa92]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xf, 0x5, 0x5, 0xf, 0x1ff, 0x967, 0x4, 0x774, 0x1, 0x80, 0x7, 0x5, 0x6, 0x7, 0xa237, 0x2, 0x9, 0x4, 0x9, 0x9, 0xa, 0x9, 0x3, 0x2, 0x0, 0x1f, 0x3, 0x6, 0x1, 0x4, 0xa, 0x2, 0x0, 0x2, 0x70000, 0x8, 0x9, 0x0, 0xffffffff, 0x1, 0x5, 0x1, 0x7fff, 0xf, 0x9, 0x80, 0x9aa, 0x0, 0x9, 0x6, 0x4, 0x6d, 0x38cf, 0x8, 0x4, 0x6, 0x9, 0x4, 0x4, 0x4, 0x5, 0x200, 0x7, 0x9, 0x2, 0x1, 0x24a, 0x1, 0x2, 0x8, 0x2, 0x800, 0x7, 0x9, 0xfffffffd, 0x0, 0x4, 0x40, 0x6, 0x10c5, 0x3b37, 0x6, 0x5, 0x4, 0x9, 0x9, 0x5, 0xde, 0x7f, 0x9, 0xff, 0x5, 0x5, 0x7, 0x800, 0x9, 0x3c56, 0x4, 0xfffffff7, 0x9, 0x9, 0x1a102cf, 0x98, 0x5, 0x5, 0x8, 0x8, 0x4, 0x4, 0x2, 0x9, 0x4, 0x5, 0xe9, 0x1, 0x9, 0x158, 0xbdf, 0x3, 0xffffff00, 0x4, 0x0, 0x8, 0x3, 0x4, 0x7, 0x9, 0x8, 0x586, 0xffffffff, 0x0, 0x7, 0x5, 0x6, 0x5, 0x3, 0x9, 0x9eaa, 0xc5aa, 0xda000000, 0x1, 0xfffffffe, 0x3, 0x6e, 0x8, 0xa329, 0x2, 0x4, 0x8, 0xfffffffe, 0x7, 0x2, 0x5, 0x0, 0xd, 0xcd, 0xde, 0x1, 0x9, 0x8, 0x458, 0x8000, 0x4, 0xfff, 0x9, 0x2, 0x1, 0xad9, 0x3, 0xb428, 0x6, 0x9, 0xd, 0x9, 0x100, 0x3, 0x2, 0x200, 0x7, 0x1, 0x9, 0x2, 0x12000, 0x7, 0xb0, 0x8, 0x9, 0xa14, 0x1, 0x2, 0x3, 0x8000, 0x5, 0x2, 0x10001, 0x200, 0x200, 0x4298, 0x7, 0x1cde, 0x7ff, 0x9, 0xfffffff9, 0x2, 0x2, 0x3, 0xea, 0x7f, 0xc, 0x7, 0x80000000, 0x8, 0x1, 0xb, 0xf, 0xfffffff3, 0x7, 0xfffffffd, 0x0, 0xc, 0x8, 0x9, 0x8, 0x5, 0x1000, 0x5, 0x3ff, 0x3, 0x8, 0x3, 0x0, 0x7, 0xffff8001, 0xff, 0x3, 0x1, 0x0, 0x7ff, 0x40, 0x81, 0x7ff, 0xb7, 0x100, 0x8, 0x527c, 0x0, 0xe, 0x3, 0x9, 0x3fe, 0x0, 0x401, 0x3, 0xf, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0xcaf, 0xc9, 0x3, 0x7, 0xffffffbe, 0x6, 0x1400, 0xfc6b, 0x2, 0x3a8b4ac0, 0x8e5, 0x386, 0x800, 0x6c24, 0x10, 0x6, 0x1bd, 0x5, 0x3, 0xa077, 0x1, 0x0, 0x9, 0x1ff, 0x1, 0xff, 0x5, 0x40cd, 0x6, 0x5, 0x7f, 0x0, 0x5, 0x267, 0x0, 0x6, 0x10000, 0x6e5, 0x6, 0x3, 0xfffffff8, 0x7, 0x6, 0x9, 0x7, 0x3ff, 0x8, 0x1, 0x9, 0xffffff01, 0x5, 0xff, 0x8, 0x7f, 0x7ff, 0x7, 0x6feb, 0x1, 0x400, 0xfffffffc, 0xa, 0x1, 0x0, 0xa24, 0x1000, 0x5, 0x7fff, 0x4, 0x2000000, 0x9, 0x9, 0x15b3643, 0xe26, 0x2, 0x2, 0x86c4, 0x401, 0x5, 0x10, 0xe16, 0x6, 0x97b, 0x7, 0x6, 0x7, 0x7, 0x792d, 0x1, 0xae, 0x6, 0x4, 0x4, 0x0, 0x80, 0x3, 0x0, 0x1, 0x3, 0x0, 0x7, 0x0, 0x4, 0x3, 0x3, 0x3, 0x100, 0x7, 0x8, 0x6, 0xd, 0x4, 0x3, 0x7, 0x8158, 0xffff5c62, 0x7, 0x6, 0x25b, 0x7, 0x10001, 0x1, 0x3, 0x101, 0x6, 0x0, 0x6, 0x9, 0xfffffff9, 0x9a5, 0xfffffff7, 0x2, 0xcab8, 0x7, 0x4, 0xfffffe87, 0x8, 0x7, 0x8000, 0x200, 0x5, 0x7, 0xfffffffa, 0x1200000, 0x89400000, 0x8, 0x80000001, 0x6, 0x8, 0x401, 0xef76, 0xfffffffb, 0x3, 0x8, 0x4, 0x10001, 0x7f, 0xc671, 0x1, 0x9, 0x0, 0x2, 0x1, 0x1, 0x7, 0x81, 0x4, 0x0, 0x4, 0x5, 0x8, 0x0, 0x0, 0x3, 0x6, 0x81, 0x7ff, 0xc72, 0xd171, 0x401, 0x5, 0x4, 0x3ff, 0x80, 0x0, 0x5, 0x1, 0xfffffff9, 0xbf0, 0x1, 0x6, 0x3, 0x3, 0x5, 0xf, 0x1, 0x9, 0xf1, 0x5, 0x5, 0x0, 0x80000001, 0x5, 0x200, 0x632, 0xdf, 0x7, 0x0, 0x0, 0x9c, 0x8001, 0x2, 0x8, 0xf, 0x7, 0x1, 0x4, 0x8, 0xb7, 0x4, 0x3, 0x4, 0x7f, 0x8, 0x0, 0xfffffffe, 0xef2c, 0x7d3, 0x81, 0xfff, 0xffffffff, 0x0, 0x8, 0xf, 0x2, 0x6, 0x0, 0x6, 0x9, 0x1, 0x8, 0x0, 0x0, 0x0, 0x2, 0x5, 0x8001, 0x8000, 0xa, 0xf849, 0x3, 0x0, 0x0, 0x0, 0x7, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x3ff, 0x8001, 0x29e, 0x6802, 0x7, 0xfff, 0x400, 0x7a, 0x65f, 0x7fffffff, 0x7, 0x1ff, 0x2, 0xffff0001, 0xff, 0x8, 0x9, 0x400, 0x6, 0x152, 0x9, 0x80000001, 0xd9e6, 0x10001, 0x0, 0xbc8b, 0x0, 0xfffffffc, 0x6, 0x1, 0x8, 0xe65, 0x4, 0x3, 0xd, 0x3, 0x4635, 0x4, 0x5, 0x2, 0x9, 0x800, 0xa3, 0x2, 0x0, 0xe9e, 0x3, 0x7, 0x0, 0x4, 0x4, 0xca4d, 0x65, 0xa9, 0x9, 0x4, 0x1, 0x8, 0x4, 0x10000, 0x10, 0x29f, 0x2, 0x6, 0x3, 0x7, 0x4, 0x4, 0x5, 0x0, 0x200000, 0x2, 0x15e, 0x4, 0x6af5ef31, 0x100, 0x10, 0x0, 0x2, 0x10001, 0x8, 0x4, 0x4, 0x6, 0x800, 0x583, 0x1, 0x8, 0x7, 0x9, 0x0, 0x5, 0x4, 0x0, 0x7fffffff, 0x26, 0x1, 0x1, 0x70, 0xfff, 0x8, 0x9, 0x1, 0x7, 0x2, 0x0, 0x7, 0x2, 0x2, 0x401, 0x4, 0x100, 0xffffb95f, 0x7f, 0x13, 0x0, 0xfff, 0x1eec7121, 0x4, 0x80, 0xffffffff, 0x3, 0x0, 0x2, 0xffffffff, 0x0, 0x1, 0x3, 0x8, 0x8, 0x2, 0x4, 0x7f, 0x8a033e00, 0x4c4, 0xa, 0x1, 0x5, 0x2, 0x3, 0xffffff03, 0x81, 0x0, 0x3, 0x8001, 0x9, 0x6, 0x7fff, 0x3, 0x8000, 0x5, 0x7, 0x6, 0x0, 0x5, 0x3, 0x1, 0xd, 0x2, 0xca, 0x5, 0x7, 0x8, 0x3, 0x5, 0x9, 0x9, 0xd, 0x4, 0x7ae2, 0x9, 0x7, 0xea, 0x7, 0xffffff6a, 0x400, 0x8, 0x8, 0x4, 0x80000001, 0x1, 0x1, 0x2, 0x7, 0xfffffff8, 0x6, 0x4, 0x0, 0x9, 0x6, 0x80000001, 0x5, 0xea83, 0x3, 0x9, 0x4, 0x0, 0x101, 0x5, 0xfffffff9, 0x3, 0xfffffff5, 0x29c6, 0xfffffe00, 0xe14, 0x4, 0x0, 0x9, 0x9, 0x1, 0x5, 0x5, 0x4, 0x6, 0x50c, 0xd6d1, 0x1, 0xc, 0x7fffffff, 0xc3a, 0x696f, 0x5fca, 0xfffffffe, 0x6, 0x5, 0x80000000, 0x10001, 0x80000000, 0x80, 0x4, 0x3, 0x28a, 0x9, 0x9, 0x10000, 0x81, 0x1, 0x0, 0x4, 0xfffffffb, 0x71b, 0x4, 0x4, 0x2c4, 0x6, 0x2, 0x6, 0x4, 0xba96, 0xffffffff, 0x5, 0x80, 0x10000, 0x6, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2, 0x2, 0x1, 0xfffffc00}]}}, @TCA_BPF_FD={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x49, 0x6}}]}, 0x62d8}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010100, @in6=@local, 0x18, 0x14, 0x2}]}, 0x38}, 0x1, 0x7}, 0x20040000) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01837700000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000078000000060a010400000000000000000100000008000b40000000000900010073797a30000000005000048020000180070001007274000014000280080001400000001508000240000000012c0001800900010068617368000000001c00028008000440fffff3e008000240000000170800074000000001"], 0x100}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) 6.557636869s ago: executing program 8 (id=3892): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0xb, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080006400000684f6fb57e6cd6ddf154169cf50d3355000021f60130436a6c9a7cc54d1b6e5d70b83fec1db7faa913c6746a54788007363e804903c1ee4234757023"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fec000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 6.290684189s ago: executing program 6 (id=3893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(r4, &(0x7f0000000300)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)) socket$inet(0x2, 0x3, 0x8d) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5.991306159s ago: executing program 8 (id=3894): socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x5, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x7, 0x5}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={r2, 0x63, "6b75336aade043bc89002c1871ee0fe95c8e9ec786adcdf213e3ce4fbc222ace1f2f24a51b1f4bb53f847a953db17c74a43249739163066b921e73bd1b3f31c34335635aa7c25258d0878bbb3b4f97bea526c12ac87f9939f17f33ec22848900baa5c5"}, &(0x7f0000000500)=0x6b) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x0) 3.484550419s ago: executing program 3 (id=3895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040081) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000001001000000000dc6f000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c005020000001bd300058edb7c"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) socket$netlink(0x10, 0x3, 0x0) 3.372478467s ago: executing program 8 (id=3896): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.182527397s ago: executing program 1 (id=3897): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000000000067db0000"], 0x34}}, 0x8080) 2.834630091s ago: executing program 6 (id=3898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(r4, &(0x7f0000000300)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)) socket$inet(0x2, 0x3, 0x8d) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.596230348s ago: executing program 1 (id=3899): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_delete(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setns(0xffffffffffffffff, 0x0) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.350692783s ago: executing program 3 (id=3900): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe800000000000"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.847259386s ago: executing program 3 (id=3901): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x24008014) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) 314.671824ms ago: executing program 3 (id=3902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) ioctl(r5, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 0s ago: executing program 5 (id=3903): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fdatasync(r1) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0xf0) sendto$inet6(r2, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @private0, 0xffff8000}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000300)={0x2}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001040)='/sys/power/pm_print_times', 0x8042, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$netlink(0x10, 0x3, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00"/13, @ANYRESHEX=r3], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000118500000086000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) kernel console output (not intermixed with test programs): > 9 [ 1237.758842][ T9643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1237.761285][ T9643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1238.069499][ T7180] usb 2-1: USB disconnect, device number 44 [ 1238.709308][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.714008][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1239.281123][T17696] netlink: 'syz.9.3032': attribute type 1 has an invalid length. [ 1239.287032][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 1239.362212][T17690] sch_fq: defrate 0 ignored. [ 1239.448042][T17698] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3029'. [ 1239.881154][T14205] Bluetooth: hci3: command tx timeout [ 1241.662438][T17724] tipc: Enabling of bearer rejected, failed to enable media [ 1241.961749][T14205] Bluetooth: hci3: command tx timeout [ 1242.569295][T17670] chnl_net:caif_netlink_parms(): no params data found [ 1242.591131][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 210 seconds [ 1242.591175][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 210 seconds [ 1242.591201][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 210 seconds [ 1242.591227][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 210 seconds [ 1242.870775][ T9] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1243.090325][T17670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.090528][T17670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1243.106103][T17670] bridge_slave_0: entered allmulticast mode [ 1243.131491][T17670] bridge_slave_0: entered promiscuous mode [ 1243.136420][T17763] sch_fq: defrate 0 ignored. [ 1243.313510][T17768] /dev/nullb0: Can't open blockdev [ 1243.546674][T17670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.546813][T17670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.547019][T17670] bridge_slave_1: entered allmulticast mode [ 1243.607380][T17670] bridge_slave_1: entered promiscuous mode [ 1243.812367][T17670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.816774][T17670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1243.877756][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms [ 1243.877785][ C0] lec:lec_tx_timeout: lec0 [ 1243.878847][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1244.043734][T14205] Bluetooth: hci3: command tx timeout [ 1244.277298][T17670] team0: Port device team_slave_0 added [ 1244.295542][T17772] fido_id[17772]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1245.149014][T17670] team0: Port device team_slave_1 added [ 1245.317510][T14205] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1245.373693][T17670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.373710][T17670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.373736][T17670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.433609][T17670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.433624][T17670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.433638][T17670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.795001][T17670] hsr_slave_0: entered promiscuous mode [ 1245.796318][T17670] hsr_slave_1: entered promiscuous mode [ 1245.797206][T17670] debugfs: 'hsr0' already exists in 'hsr' [ 1245.797230][T17670] Cannot create hsr debugfs directory [ 1245.887485][T17799] tipc: Failed to remove unknown binding: 66,0,0/0:3490980072/3490980073 [ 1245.887861][T17799] tipc: Failed to remove unknown binding: 66,0,0/0:3490980072/3490980073 [ 1246.121121][T14205] Bluetooth: hci3: command tx timeout [ 1248.062621][T14205] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1248.134723][T17817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3060'. [ 1248.134860][T17817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3060'. [ 1248.321149][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 180 seconds [ 1248.321195][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 180 seconds [ 1248.321222][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 180 seconds [ 1248.321248][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 180 seconds [ 1248.881026][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1248.881056][ C0] lec:lec_tx_timeout: lec0 [ 1250.051034][ T6004] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1250.215709][ T6004] usb 10-1: Using ep0 maxpacket: 8 [ 1250.221148][ T6004] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1250.230077][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1250.230108][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1250.230127][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1250.230151][ T6004] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1250.230173][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1250.230193][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1250.230216][ T6004] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1250.302281][ T6004] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1250.302310][ T6004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.302328][ T6004] usb 10-1: Product: syz [ 1250.302341][ T6004] usb 10-1: Manufacturer: syz [ 1250.302353][ T6004] usb 10-1: SerialNumber: syz [ 1250.334690][ T6004] usb 10-1: config 0 descriptor?? [ 1250.336197][T17843] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1250.336526][T17843] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1250.347246][ T6004] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1250.726415][T17847] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1250.773869][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 1250.960081][ T7180] usb 10-1: USB disconnect, device number 4 [ 1251.345247][T17849] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3063'. [ 1251.596453][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3071'. [ 1251.596687][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3071'. [ 1252.327876][T17868] 9p: Bad value for 'wfdno' [ 1252.332137][T17867] netlink: 'syz.1.3079': attribute type 1 has an invalid length. [ 1252.793867][T17873] tipc: Started in network mode [ 1252.793888][T17873] tipc: Node identity 4633efe28b76, cluster identity 4711 [ 1252.796347][T17873] tipc: Enabled bearer , priority 0 [ 1252.801257][ T8176] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 150 seconds [ 1252.801296][ T8176] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 150 seconds [ 1252.914087][T17871] tipc: Resetting bearer [ 1253.134394][T17874] syzkaller0: entered promiscuous mode [ 1253.134410][T17874] syzkaller0: entered allmulticast mode [ 1253.196424][T17870] tipc: Resetting bearer [ 1253.373588][T17870] tipc: Disabling bearer [ 1253.391336][ T7178] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1253.547074][ T7178] usb 6-1: Using ep0 maxpacket: 8 [ 1253.549574][ T7178] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1253.550777][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1253.550808][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1253.551387][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1253.551413][ T7178] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1253.551436][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1253.551456][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1253.551479][ T7178] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1253.591831][ T7178] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1253.591860][ T7178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.591878][ T7178] usb 6-1: Product: syz [ 1253.591891][ T7178] usb 6-1: Manufacturer: syz [ 1253.591903][ T7178] usb 6-1: SerialNumber: syz [ 1253.707520][ T7178] usb 6-1: config 0 descriptor?? [ 1253.709265][T17880] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1253.709449][T17880] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1253.751419][ T7178] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1253.843546][ T50] hid-generic 0005:0006:5508.0003: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1254.051960][T17890] fido_id[17890]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1254.156080][T17891] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1254.202882][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1254.513862][ T7178] usb 6-1: USB disconnect, device number 26 [ 1254.762714][T17899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 1254.762740][T17899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1254.774501][T17899] vhci_hcd vhci_hcd.0: Device attached [ 1254.804317][T13080] udevd[13080]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1254.840683][T17670] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1255.049805][T17670] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1255.110201][T17670] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1255.144545][ T7177] usb 36-1: SetAddress Request (2) to port 0 [ 1255.144629][ T7177] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1255.317252][T17670] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1255.391379][T17900] vhci_hcd: connection reset by peer [ 1255.468533][ T1441] vhci_hcd vhci_hcd.1: stop threads [ 1255.480837][ T1441] vhci_hcd vhci_hcd.1: release socket [ 1255.499713][ T1441] vhci_hcd vhci_hcd.1: disconnect device [ 1255.507023][T17907] nbd10: detected capacity change from 0 to 127 [ 1255.507696][T17905] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3089'. [ 1255.507715][T17905] nbd: socks must be embedded in a SOCK_ITEM attr [ 1255.509428][T12992] block nbd10: Send control failed (result -32) [ 1255.509446][T12992] block nbd10: Request send failed, requeueing [ 1255.509708][T14205] block nbd10: Receive control failed (result -104) [ 1255.509714][T12992] block nbd10: Dead connection, failed to find a fallback [ 1255.509731][T12992] block nbd10: shutting down sockets [ 1255.509741][T12992] blk_print_req_error: 138 callbacks suppressed [ 1255.509750][T12992] I/O error, dev nbd10, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1255.509768][T12992] buffer_io_error: 138 callbacks suppressed [ 1255.509776][T12992] Buffer I/O error on dev nbd10, logical block 3, async page read [ 1255.509835][ T59] I/O error, dev nbd10, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1255.509862][ T59] Buffer I/O error on dev nbd10, logical block 2, async page read [ 1255.581407][T17911] syzkaller0: entered promiscuous mode [ 1255.581431][T17911] syzkaller0: entered allmulticast mode [ 1256.753674][T17919] sch_fq: defrate 0 ignored. [ 1256.794388][T17927] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1256.806853][T17923] netlink: 'syz.9.3086': attribute type 15 has an invalid length. [ 1257.582029][T17670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.629877][T17670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.664411][ T1519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.664485][ T1519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.746111][T12294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.746319][T12294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.291331][ T7177] usb 36-1: device descriptor read/8, error -110 [ 1261.451213][ T7177] usb usb36-port1: attempt power cycle [ 1262.327062][ T7177] usb usb36-port1: unable to enumerate USB device [ 1263.732031][T17985] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3104'. [ 1263.828010][T17985] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3104'. [ 1263.848242][ T1559] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1263.876440][T17746] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1263.877524][T17746] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1263.877563][T17746] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1263.941744][T17670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.028236][ T5816] IPVS: starting estimator thread 0... [ 1264.152605][T17997] IPVS: using max 9 ests per chain, 21600 per kthread [ 1264.269635][T18001] nbd11: detected capacity change from 0 to 127 [ 1264.270165][T17995] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3109'. [ 1264.272654][T14205] block nbd11: Receive control failed (result -32) [ 1264.301868][T15404] block nbd11: Dead connection, failed to find a fallback [ 1264.301892][T15404] block nbd11: shutting down sockets [ 1264.301906][T15404] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.301933][T15404] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1264.301988][T15404] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.302009][T15404] Buffer I/O error on dev nbd11, logical block 1, async page read [ 1264.302056][T15404] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.302077][T15404] Buffer I/O error on dev nbd11, logical block 2, async page read [ 1264.302122][T15404] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.302142][T15404] Buffer I/O error on dev nbd11, logical block 3, async page read [ 1264.302195][T15404] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.302217][T15404] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1264.302263][T15404] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.302283][T15404] Buffer I/O error on dev nbd11, logical block 1, async page read [ 1264.302328][T15404] I/O error, dev nbd11, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.302350][T15404] Buffer I/O error on dev nbd11, logical block 2, async page read [ 1264.302403][T15404] I/O error, dev nbd11, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.302424][T15404] Buffer I/O error on dev nbd11, logical block 3, async page read [ 1264.302477][T15404] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.302498][T15404] Buffer I/O error on dev nbd11, logical block 0, async page read [ 1264.302542][T15404] I/O error, dev nbd11, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1264.302564][T15404] Buffer I/O error on dev nbd11, logical block 1, async page read [ 1264.303392][T15404] ldm_validate_partition_table(): Disk read failed. [ 1264.303962][T15404] Dev nbd11: unable to read RDB block 0 [ 1264.304749][T15404] nbd11: unable to read partition table [ 1264.382913][T15404] ldm_validate_partition_table(): Disk read failed. [ 1264.383474][T15404] Dev nbd11: unable to read RDB block 0 [ 1264.384155][T15404] nbd11: unable to read partition table [ 1264.914793][T18018] syzkaller0: entered promiscuous mode [ 1264.914818][T18018] syzkaller0: entered allmulticast mode [ 1265.244083][T14205] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1265.692678][T18051] sch_fq: defrate 0 ignored. [ 1265.910008][T17670] veth0_vlan: entered promiscuous mode [ 1265.980223][T17670] veth1_vlan: entered promiscuous mode [ 1266.118373][T17670] veth0_macvtap: entered promiscuous mode [ 1266.136275][T17670] veth1_macvtap: entered promiscuous mode [ 1266.169077][T17670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.204433][T17670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.240391][ T1559] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.273495][ T1441] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.338728][ T1441] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.361044][ T1441] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.673651][T18093] tipc: Enabled bearer , priority 0 [ 1266.674919][T18088] syzkaller0: entered promiscuous mode [ 1266.674932][T18088] syzkaller0: entered allmulticast mode [ 1266.926321][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1267.081024][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1267.083827][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1267.085060][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1267.085090][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1267.085164][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1267.085191][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1267.085213][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1267.085234][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1267.085258][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1267.087690][ T9] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1267.087716][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.087734][ T9] usb 10-1: Product: syz [ 1267.087748][ T9] usb 10-1: Manufacturer: syz [ 1267.087761][ T9] usb 10-1: SerialNumber: syz [ 1267.095821][ T9] usb 10-1: config 0 descriptor?? [ 1267.102427][T18094] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1267.103523][T18094] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1267.119096][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1267.236556][T18084] tipc: Resetting bearer [ 1267.506415][T18106] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1267.553770][ C0] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 1267.788834][ T9] usb 10-1: USB disconnect, device number 5 [ 1267.874264][T18084] tipc: Disabling bearer [ 1268.009213][T18099] syzkaller0: entered promiscuous mode [ 1268.009238][T18099] syzkaller0: entered allmulticast mode [ 1268.725978][ T7178] tipc: Node number set to 1731608212 [ 1269.046313][T17746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.046327][T17746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.325007][ T1391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.325025][ T1391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.104612][T18113] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3137'. [ 1272.225199][T18143] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1272.372878][ T7178] hid-generic 0005:0006:5508.0004: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1272.479601][T18157] fido_id[18157]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory [ 1272.766784][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 240 seconds [ 1272.766812][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 240 seconds [ 1272.766827][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 240 seconds [ 1272.766841][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 240 seconds [ 1274.108129][T18167] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3146'. [ 1275.524278][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1275.738805][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1275.741436][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1275.742869][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1275.742904][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1275.742925][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1275.742948][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1275.742970][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1275.742989][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1275.746763][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1275.746786][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.746803][ T9] usb 6-1: Product: syz [ 1275.746816][ T9] usb 6-1: Manufacturer: syz [ 1275.746833][ T9] usb 6-1: SerialNumber: syz [ 1275.764351][ T9] usb 6-1: config 0 descriptor?? [ 1275.766145][T18179] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1275.800595][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1275.918903][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1276.018173][T13082] udevd[13082]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1278.691071][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 210 seconds [ 1278.691114][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 210 seconds [ 1278.691140][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 210 seconds [ 1278.691166][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 210 seconds [ 1279.005372][ T7180] usb 6-1: USB disconnect, device number 27 [ 1279.873067][T18202] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1281.580849][T18220] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3162'. [ 1283.319274][ T8176] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 180 seconds [ 1283.319327][ T8176] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 180 seconds [ 1284.770770][T18257] openvswitch: netlink: Multiple metadata blocks provided [ 1285.805244][T18271] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1286.661061][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 30 seconds [ 1286.661104][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 30 seconds [ 1290.543465][T18290] netlink: 124 bytes leftover after parsing attributes in process `syz.8.3182'. [ 1290.543494][T18290] nbd: couldn't find a device at index 50331648 [ 1291.249284][ T9643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1291.281255][ T9643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1291.381172][ T9643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1291.394404][ T9643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1291.399028][ T9643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1295.861352][T14205] Bluetooth: hci5: command tx timeout [ 1298.010978][T14205] Bluetooth: hci5: command tx timeout [ 1298.406729][T18293] chnl_net:caif_netlink_parms(): no params data found [ 1298.876961][T18293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.891339][T18293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.891508][T18293] bridge_slave_0: entered allmulticast mode [ 1298.892876][T18293] bridge_slave_0: entered promiscuous mode [ 1298.904892][T18293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.905045][T18293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.905238][T18293] bridge_slave_1: entered allmulticast mode [ 1298.918279][T18293] bridge_slave_1: entered promiscuous mode [ 1298.936249][T18350] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3195'. [ 1299.114639][T18293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.117620][T18293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.465498][T18293] team0: Port device team_slave_0 added [ 1299.469652][T18293] team0: Port device team_slave_1 added [ 1299.645191][T18293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.645209][T18293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.645233][T18293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.651741][T18293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.651754][T18293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.651778][T18293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.850963][ T7178] hid-generic 0005:0006:5508.0005: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1299.883838][T18293] hsr_slave_0: entered promiscuous mode [ 1299.911823][T18293] hsr_slave_1: entered promiscuous mode [ 1299.912485][T18293] debugfs: 'hsr0' already exists in 'hsr' [ 1299.912500][T18293] Cannot create hsr debugfs directory [ 1299.943676][ T7178] IPVS: starting estimator thread 0... [ 1300.031164][T18364] IPVS: using max 8 ests per chain, 19200 per kthread [ 1300.043253][T14205] Bluetooth: hci5: command tx timeout [ 1300.127438][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.131827][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1300.255907][T18368] nbd12: detected capacity change from 0 to 127 [ 1300.257631][T14205] block nbd12: Receive control failed (result -32) [ 1300.266569][T15404] block nbd12: Dead connection, failed to find a fallback [ 1300.266590][T15404] block nbd12: shutting down sockets [ 1300.266602][T15404] blk_print_req_error: 138 callbacks suppressed [ 1300.266614][T15404] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.266637][T15404] buffer_io_error: 138 callbacks suppressed [ 1300.266647][T15404] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1300.266700][T15404] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.266722][T15404] Buffer I/O error on dev nbd12, logical block 1, async page read [ 1300.266765][T15404] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.266786][T15404] Buffer I/O error on dev nbd12, logical block 2, async page read [ 1300.266828][T15404] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.266848][T15404] Buffer I/O error on dev nbd12, logical block 3, async page read [ 1300.266898][T15404] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.266919][T15404] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1300.266961][T15404] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.266981][T15404] Buffer I/O error on dev nbd12, logical block 1, async page read [ 1300.267023][T15404] I/O error, dev nbd12, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.267043][T15404] Buffer I/O error on dev nbd12, logical block 2, async page read [ 1300.267083][T15404] I/O error, dev nbd12, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.267103][T15404] Buffer I/O error on dev nbd12, logical block 3, async page read [ 1300.267152][T15404] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.267172][T15404] Buffer I/O error on dev nbd12, logical block 0, async page read [ 1300.267221][T15404] I/O error, dev nbd12, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1300.267241][T15404] Buffer I/O error on dev nbd12, logical block 1, async page read [ 1300.268023][T15404] ldm_validate_partition_table(): Disk read failed. [ 1300.268572][T15404] Dev nbd12: unable to read RDB block 0 [ 1300.269297][T15404] nbd12: unable to read partition table [ 1300.352694][T15404] ldm_validate_partition_table(): Disk read failed. [ 1300.353251][T15404] Dev nbd12: unable to read RDB block 0 [ 1300.354777][T15404] nbd12: unable to read partition table [ 1301.624540][T18377] orangefs_mount: mount request failed with -4 [ 1302.941155][T14205] Bluetooth: hci5: command tx timeout [ 1303.989726][T18415] openvswitch: netlink: Multiple metadata blocks provided [ 1304.011215][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 270 seconds [ 1304.011259][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 270 seconds [ 1304.011286][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 270 seconds [ 1304.011309][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 270 seconds [ 1304.780075][T18425] openvswitch: netlink: Multiple metadata blocks provided [ 1305.185620][T18428] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3216'. [ 1305.801019][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1305.801044][ C0] lec:lec_tx_timeout: lec0 [ 1305.801309][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1306.338932][T18432] orangefs_mount: mount request failed with -4 [ 1308.258884][T18293] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1308.386040][T18293] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1308.466348][T18293] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1308.550154][T18293] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1308.930029][T18293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.999608][T18293] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.044248][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.044430][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.084089][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.084163][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.121137][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 240 seconds [ 1309.121179][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 240 seconds [ 1309.121207][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 240 seconds [ 1309.121233][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 240 seconds [ 1309.225208][T18293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1309.225232][T18293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.719419][T18293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.048656][T18527] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3226'. [ 1310.841013][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 1310.841044][ C0] lec:lec_tx_timeout: lec0 [ 1311.277854][T18541] orangefs_mount: mount request failed with -4 [ 1311.617681][T18558] tipc: Failed to remove unknown binding: 66,0,0/1731608212:3094949468/3094949469 [ 1311.618365][T18558] tipc: Failed to remove unknown binding: 66,0,0/1731608212:3094949468/3094949469 [ 1312.803065][T18540] Bluetooth: hci4: command 0x0406 tx timeout [ 1312.879226][T18293] veth0_vlan: entered promiscuous mode [ 1312.940237][T18293] veth1_vlan: entered promiscuous mode [ 1312.975430][T18572] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3237'. [ 1313.190504][T18293] veth0_macvtap: entered promiscuous mode [ 1313.208307][T18293] veth1_macvtap: entered promiscuous mode [ 1313.492729][T18293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1313.503509][T18293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1313.543246][ T1219] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.543488][ T1219] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.543707][ T1219] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.544203][ T1219] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.613065][ T8176] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 210 seconds [ 1313.613117][ T8176] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 210 seconds [ 1314.489305][T18576] lec:lec_atm_close: lec0: Shut down! [ 1314.790803][T18600] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3243'. [ 1314.806637][T18600] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3243'. [ 1315.031205][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.031231][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.205003][T18608] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3247'. [ 1316.431679][T18613] orangefs_mount: mount request failed with -4 [ 1316.911080][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 60 seconds [ 1316.911123][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 60 seconds [ 1316.990346][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3251'. [ 1317.307978][T18628] tipc: Failed to remove unknown binding: 66,0,0/0:2837243908/2837243909 [ 1317.308591][T18628] tipc: Failed to remove unknown binding: 66,0,0/0:2837243908/2837243909 [ 1317.333691][T18627] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3253'. [ 1317.455311][ T1568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.455329][ T1568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.456466][T18627] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3253'. [ 1317.497000][T18637] syzkaller0: entered promiscuous mode [ 1317.497024][T18637] syzkaller0: entered allmulticast mode [ 1317.666721][T18640] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3257'. [ 1318.852643][T18645] orangefs_mount: mount request failed with -4 [ 1319.801175][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 1319.801209][ C0] lec:lec_tx_timeout: lec0 [ 1321.559660][T18671] orangefs_mount: mount request failed with -4 [ 1321.626871][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3262'. [ 1321.908194][T18680] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3263'. [ 1324.170277][T18690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1324.859944][T18692] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3267'. [ 1328.640257][T18690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3266'. [ 1331.474879][T18740] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3280'. [ 1331.578780][T18749] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3279'. [ 1333.620760][T18751] orangefs_mount: mount request failed with -4 [ 1334.073174][T18764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3285'. [ 1334.231067][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 300 seconds [ 1334.231111][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 300 seconds [ 1334.231140][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 300 seconds [ 1334.231168][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 300 seconds [ 1335.376646][T18770] tipc: Started in network mode [ 1335.376664][T18770] tipc: Node identity fa57f0be9129, cluster identity 4711 [ 1335.376789][T18770] tipc: Enabled bearer , priority 0 [ 1335.384276][T18761] tipc: Resetting bearer [ 1335.631315][ T50] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1335.662944][T18760] tipc: Disabling bearer [ 1335.811085][ T50] usb 9-1: Using ep0 maxpacket: 8 [ 1335.833834][ T50] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1335.851405][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1335.851437][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1335.851458][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1335.851482][ T50] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1335.851504][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1335.851525][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1335.851548][ T50] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1335.871551][ T50] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1335.871581][ T50] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.871600][ T50] usb 9-1: Product: syz [ 1335.871613][ T50] usb 9-1: Manufacturer: syz [ 1335.871626][ T50] usb 9-1: SerialNumber: syz [ 1336.000464][ T50] usb 9-1: config 0 descriptor?? [ 1336.004274][T18771] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1336.004623][T18771] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1336.030436][ T50] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1336.629573][T18791] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3293'. [ 1337.871445][T18792] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1339.633481][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 270 seconds [ 1339.633525][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 270 seconds [ 1339.633554][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 270 seconds [ 1339.633581][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 270 seconds [ 1340.348440][ T50] usb 9-1: USB disconnect, device number 8 [ 1341.023375][T18813] tipc: Enabled bearer , priority 0 [ 1341.121724][ T9] hid-generic 0005:0006:5508.0006: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1341.403544][T18828] openvswitch: netlink: Multiple metadata blocks provided [ 1341.458586][T18823] fido_id[18823]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 1341.707842][T18813] tipc: Resetting bearer [ 1341.920166][T18821] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3300'. [ 1342.293938][T18810] tipc: Disabling bearer [ 1342.767597][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3305'. [ 1342.845364][T13247] tipc: Node number set to 1803481278 [ 1344.043862][T18855] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1344.134858][ T8176] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 240 seconds [ 1344.134903][ T8176] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 240 seconds [ 1344.462255][ T7180] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1344.950991][ T7180] usb 10-1: Using ep0 maxpacket: 8 [ 1344.955623][ T7180] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1344.956995][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1344.957025][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1344.957044][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1344.957057][ T7180] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1344.957075][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1344.957086][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1344.957099][ T7180] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1344.959447][ T7180] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1344.959461][ T7180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.959471][ T7180] usb 10-1: Product: syz [ 1344.959479][ T7180] usb 10-1: Manufacturer: syz [ 1344.959486][ T7180] usb 10-1: SerialNumber: syz [ 1345.112456][ T7180] usb 10-1: config 0 descriptor?? [ 1345.115611][T18860] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1345.117227][T18860] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1345.152170][ T7180] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1345.226225][T18870] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3314'. [ 1345.577341][T18880] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1345.959484][T18878] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 1346.016459][ T7180] usb 10-1: USB disconnect, device number 6 [ 1346.285272][T15404] udevd[15404]: setting mode of /dev/bus/usb/010/006 to 020664 failed: No such file or directory [ 1346.285450][T15404] udevd[15404]: setting owner of /dev/bus/usb/010/006 to uid=0, gid=0 failed: No such file or directory [ 1346.412364][T13080] udevd[13080]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1347.345979][ T7180] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1347.502402][ T7180] usb 10-1: Using ep0 maxpacket: 8 [ 1347.513729][ T7180] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1347.514863][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1347.514891][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1347.514920][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1347.514944][ T7180] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1347.514967][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1347.514987][ T7180] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1347.515010][ T7180] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1347.517334][ T7180] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1347.517358][ T7180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.517375][ T7180] usb 10-1: Product: syz [ 1347.517388][ T7180] usb 10-1: Manufacturer: syz [ 1347.517400][ T7180] usb 10-1: SerialNumber: syz [ 1347.521022][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 90 seconds [ 1347.521059][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 90 seconds [ 1347.527961][ T7180] usb 10-1: config 0 descriptor?? [ 1347.532190][T18902] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1347.532508][T18902] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1347.535220][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3328'. [ 1347.535238][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3328'. [ 1347.542889][ T7180] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1348.182022][T18933] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1348.714167][T18887] Bluetooth: hci2: command 0x0406 tx timeout [ 1349.071770][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3328'. [ 1349.071791][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3328'. [ 1349.592877][T18948] openvswitch: netlink: Multiple metadata blocks provided [ 1349.894333][T18951] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3330'. [ 1350.204603][ T9] usb 10-1: USB disconnect, device number 7 [ 1350.501121][ T6004] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1350.672456][ T6004] usb 2-1: Using ep0 maxpacket: 8 [ 1350.678199][ T6004] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1350.680435][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1350.680465][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1350.680485][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1350.680508][ T6004] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1350.680527][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1350.680545][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1350.680567][ T6004] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1350.686559][ T6004] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1350.686583][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.686601][ T6004] usb 2-1: Product: syz [ 1350.686614][ T6004] usb 2-1: Manufacturer: syz [ 1350.686627][ T6004] usb 2-1: SerialNumber: syz [ 1350.874509][ T6004] usb 2-1: config 0 descriptor?? [ 1350.961967][T18955] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1350.962461][T18955] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1351.155012][ T6004] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1351.521159][T18955] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1351.714900][ T6004] usb 2-1: USB disconnect, device number 45 [ 1352.288321][T13082] udevd[13082]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1352.409903][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1352.409918][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1352.603135][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1352.603150][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'. [ 1353.172937][T18993] syzkaller0: entered promiscuous mode [ 1353.172953][T18993] syzkaller0: entered allmulticast mode [ 1353.415519][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 1355.482146][ T9] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1355.751820][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1355.754481][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1355.755712][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1355.755741][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1355.755759][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1355.755772][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1355.755783][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1355.755793][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1355.755805][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1355.758012][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1355.758033][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.758043][ T9] usb 6-1: Product: syz [ 1355.758050][ T9] usb 6-1: Manufacturer: syz [ 1355.758057][ T9] usb 6-1: SerialNumber: syz [ 1355.799689][T19029] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3354'. [ 1355.908577][ T9] usb 6-1: config 0 descriptor?? [ 1355.909589][T19021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1355.909822][T19021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1355.915294][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1356.389620][ T9] hid-generic 0005:0006:5508.0007: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1356.779165][T19043] tipc: Started in network mode [ 1356.779190][T19043] tipc: Node identity 3ec55a9f18ea, cluster identity 4711 [ 1356.779366][T19043] tipc: Enabled bearer , priority 0 [ 1356.828942][T19040] tipc: Resetting bearer [ 1357.040983][ T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1357.061782][T19039] tipc: Disabling bearer [ 1357.191228][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1357.198564][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1357.199870][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1357.199899][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1357.199920][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1357.199945][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1357.199967][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1357.199988][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1357.200012][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1357.202872][ T9] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1357.202896][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.202914][ T9] usb 9-1: Product: syz [ 1357.202927][ T9] usb 9-1: Manufacturer: syz [ 1357.202940][ T9] usb 9-1: SerialNumber: syz [ 1357.215983][ T9] usb 9-1: config 0 descriptor?? [ 1357.217250][T19042] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1357.217628][T19042] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1357.224911][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1357.249740][T19045] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1357.747036][T19047] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1359.268534][T19061] syzkaller0: entered promiscuous mode [ 1359.268558][T19061] syzkaller0: entered allmulticast mode [ 1359.842458][ T5816] usb 9-1: USB disconnect, device number 9 [ 1360.066229][ T7180] usb 6-1: USB disconnect, device number 28 [ 1361.674448][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.678007][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1361.751466][T19077] syzkaller0: entered promiscuous mode [ 1361.751489][T19077] syzkaller0: entered allmulticast mode [ 1364.881033][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 330 seconds [ 1364.881061][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 330 seconds [ 1364.881076][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 330 seconds [ 1364.881090][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 330 seconds [ 1366.711530][T19113] netlink: 'syz.6.3378': attribute type 1 has an invalid length. [ 1367.246689][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3378'. [ 1368.930505][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 7250 ms [ 1368.930540][ C0] lec:lec_tx_timeout: lec0 [ 1369.122323][T19126] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3380'. [ 1369.543253][T19113] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1369.591085][ T6004] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1369.698549][T19143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3384'. [ 1369.751080][ T6004] usb 6-1: Using ep0 maxpacket: 8 [ 1369.754448][ T6004] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1369.757182][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1369.757214][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1369.757236][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1369.757260][ T6004] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1369.757348][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1369.757368][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1369.757391][ T6004] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1369.791783][ T6004] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1369.791811][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.791828][ T6004] usb 6-1: Product: syz [ 1369.791840][ T6004] usb 6-1: Manufacturer: syz [ 1369.791853][ T6004] usb 6-1: SerialNumber: syz [ 1369.823608][ T6004] usb 6-1: config 0 descriptor?? [ 1369.824742][T19133] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1369.824957][T19133] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1369.855980][ T6004] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1369.937254][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 300 seconds [ 1369.937299][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 300 seconds [ 1369.937324][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 300 seconds [ 1369.937348][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 300 seconds [ 1370.198552][T19143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3384'. [ 1371.081602][T19177] netlink: 'syz.6.3390': attribute type 12 has an invalid length. [ 1371.112582][T19179] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1375.562973][ T8176] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 270 seconds [ 1375.563025][ T8176] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 270 seconds [ 1376.144998][T19199] netlink: 'syz.8.3395': attribute type 1 has an invalid length. [ 1376.406092][T19199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1376.673074][ T8545] lec:lec_start_xmit: lec0:No lecd attached [ 1377.423158][T19233] netlink: 212360 bytes leftover after parsing attributes in process `syz.8.3403'. [ 1377.631139][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 120 seconds [ 1377.631190][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 120 seconds [ 1378.148865][ T7177] usb 6-1: USB disconnect, device number 29 [ 1378.281188][ T6004] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1378.441015][ T6004] usb 10-1: Using ep0 maxpacket: 8 [ 1378.443417][ T6004] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1378.445049][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1378.445080][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1378.445101][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1378.445128][ T6004] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1378.445157][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1378.445178][ T6004] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1378.445203][ T6004] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1378.447722][ T6004] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1378.447747][ T6004] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.447766][ T6004] usb 10-1: Product: syz [ 1378.447780][ T6004] usb 10-1: Manufacturer: syz [ 1378.447791][ T6004] usb 10-1: SerialNumber: syz [ 1378.588452][ T6004] usb 10-1: config 0 descriptor?? [ 1378.590026][T19243] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1378.590194][T19243] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1378.621487][ T6004] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1380.703268][T19279] netlink: 212360 bytes leftover after parsing attributes in process `syz.8.3414'. [ 1380.820349][T19280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3413'. [ 1381.971592][ T7177] usb 10-1: USB disconnect, device number 8 [ 1382.593647][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5920 ms [ 1382.593669][ C0] lec:lec_tx_timeout: lec0 [ 1383.637588][T19288] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1385.245208][T19317] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.3425'. [ 1386.498251][T19328] openvswitch: netlink: Flow key attr not present in new flow. [ 1390.487436][T19337] sch_fq: defrate 0 ignored. [ 1391.171321][T19340] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1393.098795][T19376] openvswitch: netlink: Multiple metadata blocks provided [ 1393.236220][T19371] openvswitch: netlink: Multiple metadata blocks provided [ 1393.876842][T19381] openvswitch: netlink: Multiple metadata blocks provided [ 1393.918484][T19385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.548668][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 360 seconds [ 1395.548710][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 360 seconds [ 1395.548725][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 360 seconds [ 1395.548740][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 360 seconds [ 1396.546062][T19400] openvswitch: netlink: Multiple metadata blocks provided [ 1397.116404][T19405] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3449'. [ 1397.661259][ T6004] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1397.811007][ T6004] usb 9-1: Using ep0 maxpacket: 8 [ 1397.813077][ T6004] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1397.814104][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1397.814122][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1397.814133][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1397.814146][ T6004] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1397.814157][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1397.814168][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1397.814180][ T6004] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1397.816714][ T6004] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1397.816728][ T6004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.816738][ T6004] usb 9-1: Product: syz [ 1397.816746][ T6004] usb 9-1: Manufacturer: syz [ 1397.816753][ T6004] usb 9-1: SerialNumber: syz [ 1397.903288][ T6004] usb 9-1: config 0 descriptor?? [ 1397.920254][T19412] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1397.953440][T19412] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1398.018597][ T6004] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1398.513189][T19422] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1399.539303][T18540] Bluetooth: hci3: command 0x0406 tx timeout [ 1399.691134][T19427] syzkaller0: entered promiscuous mode [ 1399.691160][T19427] syzkaller0: entered allmulticast mode [ 1400.292463][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 330 seconds [ 1400.292506][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 330 seconds [ 1400.292534][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 330 seconds [ 1400.292560][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 330 seconds [ 1400.503077][ T6004] usb 9-1: USB disconnect, device number 10 [ 1401.508070][T19447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3454'. [ 1404.605863][T19450] orangefs_mount: mount request failed with -4 [ 1405.021294][T19461] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3462'. [ 1405.178698][T18887] Bluetooth: hci5: link tx timeout [ 1405.178908][T18887] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1405.191128][T18887] Bluetooth: hci5: link tx timeout [ 1405.191145][T18887] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1405.774556][ T8176] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 300 seconds [ 1405.774599][ T8176] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 300 seconds [ 1407.292860][T18887] Bluetooth: hci5: command 0x0406 tx timeout [ 1407.780986][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 150 seconds [ 1407.781034][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 150 seconds [ 1407.988858][T19493] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3468'. [ 1410.890539][T19511] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3473'. [ 1413.077307][T19532] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.3478'. [ 1413.483408][T19538] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3480'. [ 1415.581900][T19547] syzkaller0: entered promiscuous mode [ 1415.581915][T19547] syzkaller0: entered allmulticast mode [ 1415.701902][T19552] openvswitch: netlink: Multiple metadata blocks provided [ 1416.068965][T19553] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3481'. [ 1416.914271][T19556] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3484'. [ 1416.914295][T19556] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3484'. [ 1420.032111][T19576] orangefs_mount: mount request failed with -4 [ 1420.170126][T19591] syzkaller0: entered promiscuous mode [ 1420.170151][T19591] syzkaller0: entered allmulticast mode [ 1420.229359][T19595] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3495'. [ 1420.229393][T19595] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3495'. [ 1420.695083][T19609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.095861][T19617] netlink: 'syz.6.3504': attribute type 1 has an invalid length. [ 1422.255656][T19620] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3504'. [ 1422.281269][ T6004] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1422.324722][T19617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1422.325859][T19614] syzkaller0: entered promiscuous mode [ 1422.325883][T19614] syzkaller0: entered allmulticast mode [ 1422.402927][T19621] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3500'. [ 1422.460976][ T6004] usb 2-1: Using ep0 maxpacket: 8 [ 1422.480261][ T6004] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1422.490578][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1422.490613][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1422.490636][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1422.490661][ T6004] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1422.490684][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1422.490706][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1422.490730][ T6004] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1422.596613][ T6004] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1422.596631][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.596641][ T6004] usb 2-1: Product: syz [ 1422.596649][ T6004] usb 2-1: Manufacturer: syz [ 1422.596656][ T6004] usb 2-1: SerialNumber: syz [ 1422.599690][ T6004] usb 2-1: config 0 descriptor?? [ 1422.612002][T19615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1422.612196][T19615] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1422.657801][ T6004] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1423.030396][T19632] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1423.221419][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.225163][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1423.243561][ T7178] usb 2-1: USB disconnect, device number 46 [ 1423.730243][T19633] orangefs_mount: mount request failed with -4 [ 1424.996618][T19650] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1425.175644][T19647] netlink: 'syz.1.3508': attribute type 15 has an invalid length. [ 1425.602396][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 390 seconds [ 1425.602424][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 390 seconds [ 1425.602439][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 390 seconds [ 1425.602454][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 390 seconds [ 1426.150629][T19666] openvswitch: netlink: Multiple metadata blocks provided [ 1427.377689][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3515'. [ 1428.320131][T19683] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1429.669670][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6440 ms [ 1429.669707][ C0] lec:lec_tx_timeout: lec0 [ 1430.735945][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 360 seconds [ 1430.735990][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 360 seconds [ 1430.736019][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 360 seconds [ 1430.736048][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 360 seconds [ 1431.299806][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1431.417364][T19704] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3522'. [ 1432.761144][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1432.764071][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1432.765860][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1432.765892][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1432.765914][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1432.765941][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1432.765964][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1432.765985][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1432.766009][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1432.769317][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1432.769344][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.769363][ T9] usb 6-1: Product: syz [ 1432.769377][ T9] usb 6-1: Manufacturer: syz [ 1432.769390][ T9] usb 6-1: SerialNumber: syz [ 1433.278126][ T9] usb 6-1: config 0 descriptor?? [ 1433.300034][T19696] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1433.301162][T19696] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1433.325468][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1434.344985][T19715] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1434.863137][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1435.496887][T19721] openvswitch: netlink: Multiple metadata blocks provided [ 1435.861676][ T8176] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 330 seconds [ 1435.861721][ T8176] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 330 seconds [ 1436.115544][ T7182] usb 6-1: USB disconnect, device number 30 [ 1438.105214][T19741] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 1438.105242][T19741] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1438.105496][T19741] vhci_hcd vhci_hcd.0: Device attached [ 1438.154664][T19743] vhci_hcd: connection closed [ 1438.201237][ T1219] vhci_hcd vhci_hcd.9: stop threads [ 1438.201255][ T1219] vhci_hcd vhci_hcd.9: release socket [ 1438.201277][ T1219] vhci_hcd vhci_hcd.9: disconnect device [ 1438.411100][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 180 seconds [ 1438.411145][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 180 seconds [ 1439.825984][ T9] hid-generic 0005:0006:5508.0008: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1440.101236][ T8545] lec:lec_start_xmit: lec0:No lecd attached [ 1440.255241][T19764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1440.294589][T19759] fido_id[19759]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 1440.672739][T19767] syzkaller0: entered promiscuous mode [ 1440.672765][T19767] syzkaller0: entered allmulticast mode [ 1440.990960][ T6004] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1441.471061][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 1441.700144][T19778] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1441.700172][T19778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1441.717650][T19778] vhci_hcd vhci_hcd.0: Device attached [ 1441.896364][ T6004] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1441.897688][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1441.897729][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1441.897751][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1441.897776][ T6004] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1441.897798][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1441.897819][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1441.897844][ T6004] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1441.900506][ T6004] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1441.900532][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.900551][ T6004] usb 7-1: Product: syz [ 1441.900564][ T6004] usb 7-1: Manufacturer: syz [ 1441.900576][ T6004] usb 7-1: SerialNumber: syz [ 1441.905456][ T6004] usb 7-1: config 0 descriptor?? [ 1441.911478][T19769] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1441.960133][T19769] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1442.103899][ T6004] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1442.244985][T13247] usb 50-1: SetAddress Request (2) to port 0 [ 1442.245034][T13247] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1442.620293][T19786] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1444.611328][T18208] usb 7-1: USB disconnect, device number 26 [ 1444.928339][T19791] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3543'. [ 1445.854175][T13082] udevd[13082]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1446.529803][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6420 ms [ 1446.529824][ C0] lec:lec_tx_timeout: lec0 [ 1446.623101][T19780] vhci_hcd: connection reset by peer [ 1446.637019][ T1559] vhci_hcd vhci_hcd.8: stop threads [ 1446.637046][ T1559] vhci_hcd vhci_hcd.8: release socket [ 1446.637117][ T1559] vhci_hcd vhci_hcd.8: disconnect device [ 1447.004991][T19796] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3545'. [ 1447.411917][T13247] usb 50-1: device descriptor read/8, error -110 [ 1447.834271][T19807] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3544'. [ 1448.027188][T13247] usb usb50-port1: attempt power cycle [ 1448.872420][T19814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1449.242262][T13247] usb usb50-port1: unable to enumerate USB device [ 1449.269887][ T6004] hid-generic 0005:0006:5508.0009: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1449.698282][T19820] fido_id[19820]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 1453.165805][T19848] openvswitch: netlink: Multiple metadata blocks provided [ 1453.551596][T19854] netlink: 108 bytes leftover after parsing attributes in process `syz.9.3561'. [ 1454.401264][T19864] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1454.401291][T19864] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1454.405492][T19864] vhci_hcd vhci_hcd.0: Device attached [ 1454.630981][T19866] vhci_hcd: connection closed [ 1454.669474][ T3887] vhci_hcd vhci_hcd.1: stop threads [ 1454.884571][ T3887] vhci_hcd vhci_hcd.1: release socket [ 1454.884618][ T3887] vhci_hcd vhci_hcd.1: disconnect device [ 1454.941062][T13247] usb 36-1: enqueue for inactive port 0 [ 1455.447617][T13247] usb usb36-port1: attempt power cycle [ 1455.522769][T19870] netlink: 'syz.6.3563': attribute type 15 has an invalid length. [ 1455.751124][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 420 seconds [ 1455.751168][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 420 seconds [ 1455.751195][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 420 seconds [ 1455.751221][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 420 seconds [ 1456.604382][T19879] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1456.604409][T19879] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1456.604708][T19881] vhci_hcd: connection closed [ 1456.608260][T19879] vhci_hcd vhci_hcd.0: Device attached [ 1456.717589][ T5170] udevd[5170]: worker [12992] /devices/virtual/block/nbd10 timeout; kill it [ 1456.718969][ T5170] udevd[5170]: seq 23797 '/devices/virtual/block/nbd10' killed [ 1456.719013][ T5170] udevd[5170]: worker [13063] /devices/virtual/block/nbd4 timeout; kill it [ 1456.719077][ T5170] udevd[5170]: seq 20125 '/devices/virtual/block/nbd4' killed [ 1456.719117][ T5170] udevd[5170]: worker [13261] /devices/virtual/block/nbd6 timeout; kill it [ 1456.719171][ T5170] udevd[5170]: seq 20854 '/devices/virtual/block/nbd6' killed [ 1456.719196][ T5170] udevd[5170]: worker [13081] /devices/virtual/block/nbd5 timeout; kill it [ 1456.719249][ T5170] udevd[5170]: seq 20442 '/devices/virtual/block/nbd5' killed [ 1456.747682][T13247] usb usb36-port1: unable to enumerate USB device [ 1456.756453][ T44] vhci_hcd vhci_hcd.9: stop threads [ 1456.756479][ T44] vhci_hcd vhci_hcd.9: release socket [ 1456.756515][ T44] vhci_hcd vhci_hcd.9: disconnect device [ 1457.192835][T19885] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1458.780218][T19893] orangefs_mount: mount request failed with -4 [ 1461.007087][T19914] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3572'. [ 1461.051603][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 390 seconds [ 1461.051646][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 390 seconds [ 1461.051673][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 390 seconds [ 1461.051700][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 390 seconds [ 1461.100554][T13247] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1461.329685][T19916] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3574'. [ 1461.332627][T13247] usb 9-1: Using ep0 maxpacket: 8 [ 1461.411583][T13247] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1461.412721][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1461.412750][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1461.412770][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1461.412788][T13247] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1461.412800][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1461.412811][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1461.412823][T13247] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1461.796122][T13247] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1461.796151][T13247] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.796168][T13247] usb 9-1: Product: syz [ 1461.796187][T13247] usb 9-1: Manufacturer: syz [ 1461.796200][T13247] usb 9-1: SerialNumber: syz [ 1461.809493][T13247] usb 9-1: config 0 descriptor?? [ 1461.814896][T19907] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1461.815071][T19907] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1461.820262][T13247] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1462.495895][T19920] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1466.572072][T13247] usb 9-1: USB disconnect, device number 11 [ 1469.102146][ T8176] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 360 seconds [ 1469.102189][ T8176] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 360 seconds [ 1469.284851][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 210 seconds [ 1469.284894][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 210 seconds [ 1469.747043][T19930] openvswitch: netlink: Multiple metadata blocks provided [ 1471.235092][T19937] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3578'. [ 1471.685093][T18887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1471.753819][T18887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1471.756175][T18887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1471.762284][T18887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1471.786133][T18887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1473.216945][T19959] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3581'. [ 1473.961251][T18540] Bluetooth: hci1: command tx timeout [ 1475.590975][T13247] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1475.593638][T19968] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1475.597203][T19968] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1475.597865][T19968] vhci_hcd vhci_hcd.0: Device attached [ 1476.016607][T13247] usb 2-1: Using ep0 maxpacket: 8 [ 1476.019444][T13247] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1476.076094][T13247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1476.076127][T13247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1476.076146][T13247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1476.076169][T13247] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1476.076190][T13247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1476.076210][T13247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1476.076232][T13247] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1476.078235][T13247] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1476.078250][T13247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.078261][T13247] usb 2-1: Product: syz [ 1476.078268][T13247] usb 2-1: Manufacturer: syz [ 1476.078275][T13247] usb 2-1: SerialNumber: syz [ 1476.088144][T18540] Bluetooth: hci1: command tx timeout [ 1476.095090][T13247] usb 2-1: config 0 descriptor?? [ 1476.096425][T19966] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1476.096738][T19966] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1476.116219][T13247] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1476.127222][T19970] vhci_hcd: connection closed [ 1476.144628][T17969] vhci_hcd vhci_hcd.5: stop threads [ 1476.144653][T17969] vhci_hcd vhci_hcd.5: release socket [ 1476.144691][T17969] vhci_hcd vhci_hcd.5: disconnect device [ 1476.910643][T19975] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1478.121102][T18540] Bluetooth: hci1: command tx timeout [ 1478.231001][T13247] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1478.380935][T13247] usb 9-1: Using ep0 maxpacket: 8 [ 1478.388275][T13247] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1478.390345][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1478.390363][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1478.390381][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1478.390394][T13247] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1478.390406][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1478.390417][T13247] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1478.390430][T13247] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1478.480444][T13247] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1478.480474][T13247] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.480493][T13247] usb 9-1: Product: syz [ 1478.480506][T13247] usb 9-1: Manufacturer: syz [ 1478.480516][T13247] usb 9-1: SerialNumber: syz [ 1478.532924][T13247] usb 9-1: config 0 descriptor?? [ 1478.533987][T19978] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1478.534209][T19978] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1478.570018][T13247] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1479.140644][ T50] usb 2-1: USB disconnect, device number 47 [ 1480.202253][T18540] Bluetooth: hci1: command tx timeout [ 1480.572055][T19932] chnl_net:caif_netlink_parms(): no params data found [ 1480.726239][T20000] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3590'. [ 1481.120251][T20006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.231366][T18208] usb 9-1: USB disconnect, device number 12 [ 1482.793570][T19932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.793680][T19932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.793936][T19932] bridge_slave_0: entered allmulticast mode [ 1482.799905][T19932] bridge_slave_0: entered promiscuous mode [ 1482.873103][T19932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.873222][T19932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.873478][T19932] bridge_slave_1: entered allmulticast mode [ 1482.876971][T19932] bridge_slave_1: entered promiscuous mode [ 1483.250550][T19932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.294140][T19932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.374324][T19932] team0: Port device team_slave_0 added [ 1483.378883][T19932] team0: Port device team_slave_1 added [ 1483.456553][T20019] netlink: 'syz.8.3592': attribute type 15 has an invalid length. [ 1483.482924][T19932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.482941][T19932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.482966][T19932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.485166][T19932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1483.485180][T19932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.485206][T19932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.623728][T20019] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1483.812753][T20022] openvswitch: netlink: Multiple metadata blocks provided [ 1484.450528][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.453898][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1484.528746][T19932] hsr_slave_0: entered promiscuous mode [ 1484.532334][T19932] hsr_slave_1: entered promiscuous mode [ 1484.538684][T19932] debugfs: 'hsr0' already exists in 'hsr' [ 1484.538709][T19932] Cannot create hsr debugfs directory [ 1486.401033][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 450 seconds [ 1486.401077][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 450 seconds [ 1486.401105][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 450 seconds [ 1486.401132][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 450 seconds [ 1487.057261][T20052] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.3603'. [ 1487.295930][T20058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1487.781260][ T7178] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1487.941409][ T7178] usb 6-1: Using ep0 maxpacket: 8 [ 1488.080401][ T7178] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1488.092285][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1488.092319][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1488.092370][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1488.092432][ T7178] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1488.092492][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1488.092542][ T7178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1488.092595][ T7178] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1488.173060][ T7178] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1488.173120][ T7178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.173167][ T7178] usb 6-1: Product: syz [ 1488.173220][ T7178] usb 6-1: Manufacturer: syz [ 1488.173235][ T7178] usb 6-1: SerialNumber: syz [ 1488.505813][ T7178] usb 6-1: config 0 descriptor?? [ 1488.642608][T20056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1488.643080][T20056] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1488.679175][ T7178] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1490.304216][T20076] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1490.711331][T20075] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1491.344103][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6890 ms [ 1491.344136][ C0] lec:lec_tx_timeout: lec0 [ 1491.446567][T20072] netlink: 'syz.1.3606': attribute type 15 has an invalid length. [ 1491.522656][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 420 seconds [ 1491.522701][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 420 seconds [ 1491.522730][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 420 seconds [ 1491.522765][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 420 seconds [ 1492.009689][T20096] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3610'. [ 1492.282690][T18205] usb 6-1: USB disconnect, device number 31 [ 1493.761394][T20120] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3614'. [ 1494.004960][T20122] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3615'. [ 1494.004992][T20122] nbd: socks must be embedded in a SOCK_ITEM attr [ 1494.936483][T20140] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3620'. [ 1495.091779][T20143] netlink: 79 bytes leftover after parsing attributes in process `syz.6.3621'. [ 1495.430028][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3623'. [ 1495.486709][T20160] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.3625'. [ 1495.985499][T19932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1495.997417][T20169] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3627'. [ 1496.353969][T19932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1496.354047][T20169] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3627'. [ 1496.443020][T19932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1496.540184][T19932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1496.662300][T20190] netlink: 79 bytes leftover after parsing attributes in process `syz.6.3630'. [ 1497.125084][T20201] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3631'. [ 1499.251388][T19070] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 390 seconds [ 1499.251432][T19070] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 390 seconds [ 1499.429027][T19932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.528462][T19932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.614445][T18667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.614530][T18667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.634645][T20222] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3635'. [ 1499.661480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.661620][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1499.831601][T20226] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3636'. [ 1499.842317][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 240 seconds [ 1499.842358][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 240 seconds [ 1500.217869][T20238] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3640'. [ 1500.218096][T20238] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3640'. [ 1502.527833][T19932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.708729][T20270] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3647'. [ 1502.874600][T19932] veth0_vlan: entered promiscuous mode [ 1503.682176][T20274] netlink: 'syz.8.3646': attribute type 12 has an invalid length. [ 1503.683759][T19932] veth1_vlan: entered promiscuous mode [ 1504.672900][T19932] veth0_macvtap: entered promiscuous mode [ 1504.686020][T19932] veth1_macvtap: entered promiscuous mode [ 1505.545429][T20275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1506.307299][T19932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1506.320548][T19932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1506.388459][ T1534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.389636][ T1534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.389680][ T1534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.389715][ T1534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1506.942129][T20306] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3653'. [ 1506.967019][T20307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3654'. [ 1507.057705][T20307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3654'. [ 1507.285956][ T1476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.285975][ T1476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.287803][T20318] netlink: 212360 bytes leftover after parsing attributes in process `syz.8.3657'. [ 1508.306735][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.306753][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.700971][T18205] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1509.930962][T18205] usb 2-1: Using ep0 maxpacket: 8 [ 1509.947450][T18205] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1509.948597][T18205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1509.948626][T18205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1509.948647][T18205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1509.948672][T18205] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1509.948693][T18205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1509.948714][T18205] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1509.948738][T18205] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1509.951086][T18205] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1509.951117][T18205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.951135][T18205] usb 2-1: Product: syz [ 1509.951149][T18205] usb 2-1: Manufacturer: syz [ 1509.951162][T18205] usb 2-1: SerialNumber: syz [ 1509.958563][T18205] usb 2-1: config 0 descriptor?? [ 1509.969706][T20325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1509.970009][T20325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1509.993027][T18205] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1510.359296][T20345] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1510.673417][T20349] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3665'. [ 1510.673655][T20349] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3665'. [ 1510.788357][T18205] usb 2-1: USB disconnect, device number 48 [ 1510.970236][T13080] udevd[13080]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1511.386881][T20364] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3668'. [ 1514.558003][T20374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3671'. [ 1514.765990][T20378] orangefs_mount: mount request failed with -4 [ 1516.413512][T20400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3676'. [ 1516.413770][T20400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3676'. [ 1516.481087][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 480 seconds [ 1516.481140][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 480 seconds [ 1516.481168][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 480 seconds [ 1516.481194][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 480 seconds [ 1516.901279][ T6004] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1517.433769][ T6004] usb 6-1: Using ep0 maxpacket: 8 [ 1517.633802][T20412] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1517.737498][ T6004] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1517.739354][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1517.739383][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1517.739404][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1517.739427][ T6004] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1517.739448][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1517.739468][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1517.739490][ T6004] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1517.860529][ T6004] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1517.860550][ T6004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.860560][ T6004] usb 6-1: Product: syz [ 1517.860568][ T6004] usb 6-1: Manufacturer: syz [ 1517.860575][ T6004] usb 6-1: SerialNumber: syz [ 1517.906530][T20410] netlink: 'syz.6.3679': attribute type 15 has an invalid length. [ 1517.912962][ T6004] usb 6-1: config 0 descriptor?? [ 1517.924470][T20403] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1517.924876][T20403] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1517.954293][ T6004] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1519.046505][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1519.180407][T20420] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.3681'. [ 1520.619558][T20433] orangefs_mount: mount request failed with -4 [ 1520.620414][ T6004] usb 6-1: USB disconnect, device number 32 [ 1522.172411][T20464] netlink: 'syz.3.3691': attribute type 15 has an invalid length. [ 1522.629106][T20467] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1522.652157][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 450 seconds [ 1522.652203][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 450 seconds [ 1522.652232][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 450 seconds [ 1522.652260][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 450 seconds [ 1523.372247][T20470] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3688'. [ 1525.356615][ T8545] lec:lec_start_xmit: lec0:No lecd attached [ 1528.285578][T20527] orangefs_mount: mount request failed with -4 [ 1529.467746][T20550] netlink: 'syz.6.3705': attribute type 15 has an invalid length. [ 1530.047637][T19070] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 420 seconds [ 1530.047681][T19070] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 420 seconds [ 1530.067980][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 270 seconds [ 1530.068025][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 270 seconds [ 1530.859839][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 1530.859872][ C0] lec:lec_tx_timeout: lec0 [ 1534.973432][T20599] orangefs_mount: mount request failed with -4 [ 1535.280508][T20617] syzkaller0: entered promiscuous mode [ 1535.280523][T20617] syzkaller0: entered allmulticast mode [ 1536.480593][T20627] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1536.798800][T20624] netlink: 'syz.1.3722': attribute type 15 has an invalid length. [ 1539.611885][T20688] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1539.622625][T20670] orangefs_mount: mount request failed with -4 [ 1540.022202][T20685] netlink: 'syz.6.3736': attribute type 15 has an invalid length. [ 1540.369713][T20706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1543.762910][T20728] netlink: 'syz.8.3744': attribute type 6 has an invalid length. [ 1544.815805][T20743] orangefs_mount: mount request failed with -4 [ 1544.920358][T20760] netlink: 'syz.5.3751': attribute type 15 has an invalid length. [ 1545.471098][ T5816] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1545.632452][ T5816] usb 9-1: Using ep0 maxpacket: 8 [ 1545.671661][ T5816] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1545.681370][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1545.681402][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1545.681423][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1545.681447][ T5816] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1545.681468][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1545.681487][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1545.681510][ T5816] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1545.703494][ T5816] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1545.703522][ T5816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.703541][ T5816] usb 9-1: Product: syz [ 1545.703554][ T5816] usb 9-1: Manufacturer: syz [ 1545.703567][ T5816] usb 9-1: SerialNumber: syz [ 1545.803950][ T5816] usb 9-1: config 0 descriptor?? [ 1545.804915][T20775] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1545.805125][T20775] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1545.810528][ T5816] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1545.887325][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.890270][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1545.970939][T18208] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1546.123690][T18208] usb 7-1: Using ep0 maxpacket: 8 [ 1546.133874][T18208] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1546.135342][T18208] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.135395][T18208] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1546.138312][T18208] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1546.138339][T18208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.138358][T18208] usb 7-1: Product: syz [ 1546.138372][T18208] usb 7-1: Manufacturer: syz [ 1546.138387][T18208] usb 7-1: SerialNumber: syz [ 1546.153029][T18208] usb 7-1: config 0 descriptor?? [ 1546.178549][T18208] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1548.706063][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 510 seconds [ 1548.706162][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 510 seconds [ 1548.706192][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 510 seconds [ 1548.706220][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 510 seconds [ 1548.767920][T18208] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1548.996420][T13082] udevd[13082]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1549.504930][T20812] netlink: 'syz.3.3759': attribute type 15 has an invalid length. [ 1550.379768][T18205] usb 7-1: USB disconnect, device number 27 [ 1550.575342][T18208] usb 9-1: USB disconnect, device number 13 [ 1550.585292][T20815] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1550.890896][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1550.890930][ C0] lec:lec_tx_timeout: lec0 [ 1550.900617][T20826] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3762'. [ 1551.893520][T20834] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3765'. [ 1552.271471][T20834] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3765'. [ 1552.351371][ T50] hid-generic 0005:0006:5508.000A: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1552.466418][T20849] fido_id[20849]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 1552.537742][T20855] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3769'. [ 1552.759926][T18540] Bluetooth: hci1: link tx timeout [ 1552.760288][T18540] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1552.961124][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 480 seconds [ 1552.961219][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 480 seconds [ 1552.961278][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 480 seconds [ 1552.961335][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 480 seconds [ 1553.144380][T20880] openvswitch: netlink: Multiple metadata blocks provided [ 1553.163507][T20879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1553.471169][ T5816] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1553.761813][ T5816] usb 7-1: Using ep0 maxpacket: 8 [ 1553.829449][ T5816] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1553.862191][ T5816] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.862389][ T5816] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1554.424137][ T5816] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1554.424156][ T5816] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.424167][ T5816] usb 7-1: Product: syz [ 1554.424174][ T5816] usb 7-1: Manufacturer: syz [ 1554.424182][ T5816] usb 7-1: SerialNumber: syz [ 1554.543017][ T5816] usb 7-1: config 0 descriptor?? [ 1554.577375][ T5816] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1554.912195][ T5816] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1554.914564][T18887] Bluetooth: hci1: command 0x0406 tx timeout [ 1555.941871][T13082] udevd[13082]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1557.757769][T18635] usb 7-1: USB disconnect, device number 28 [ 1558.277980][ T7182] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1559.340953][ T7182] usb 4-1: Using ep0 maxpacket: 8 [ 1559.347072][ T7182] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1559.348542][ T7182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1559.348573][ T7182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1559.348593][ T7182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1559.348620][ T7182] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1559.348642][ T7182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1559.348662][ T7182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1559.348685][ T7182] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1559.352093][ T7182] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1559.352121][ T7182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.352140][ T7182] usb 4-1: Product: syz [ 1559.352154][ T7182] usb 4-1: Manufacturer: syz [ 1559.352168][ T7182] usb 4-1: SerialNumber: syz [ 1559.502002][ T7182] usb 4-1: config 0 descriptor?? [ 1559.502898][T20912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1559.503108][T20912] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1559.542413][ T7182] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1559.601460][T20919] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3785'. [ 1560.105262][T20934] openvswitch: netlink: Flow actions attr not present in new flow. [ 1560.951662][T19070] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 450 seconds [ 1560.951705][T19070] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 450 seconds [ 1560.982614][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 300 seconds [ 1560.982654][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 300 seconds [ 1561.323475][T20951] netlink: 79 bytes leftover after parsing attributes in process `syz.6.3793'. [ 1561.641223][T20956] openvswitch: netlink: Multiple metadata blocks provided [ 1562.907370][ T5816] usb 4-1: USB disconnect, device number 6 [ 1563.883241][T20973] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3799'. [ 1565.402519][T20988] netlink: 'syz.8.3804': attribute type 15 has an invalid length. [ 1569.180613][T21017] orangefs_mount: mount request failed with -4 [ 1569.254555][T21033] openvswitch: netlink: Multiple metadata blocks provided [ 1569.350535][T21035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3816'. [ 1569.440928][T18635] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1569.590908][T18635] usb 6-1: Using ep0 maxpacket: 8 [ 1569.984696][T18635] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1569.986400][T18635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1569.986430][T18635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1569.986452][T18635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1569.986477][T18635] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1569.986500][T18635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1569.986520][T18635] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1569.986542][T18635] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1570.142114][T18635] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1570.142247][T18635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.142266][T18635] usb 6-1: Product: syz [ 1570.142399][T21039] netlink: 'syz.1.3817': attribute type 15 has an invalid length. [ 1570.144164][T18635] usb 6-1: Manufacturer: syz [ 1570.144183][T18635] usb 6-1: SerialNumber: syz [ 1570.243179][T18635] usb 6-1: config 0 descriptor?? [ 1570.244155][T21027] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1570.244365][T21027] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1570.375188][T18635] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1571.233761][T21050] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1571.840627][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 1573.125319][ T5816] usb 6-1: USB disconnect, device number 33 [ 1573.268186][T13080] udevd[13080]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1573.670668][T21071] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3824'. [ 1576.543286][T21080] orangefs_mount: mount request failed with -4 [ 1576.587471][T21093] netlink: 'syz.3.3829': attribute type 15 has an invalid length. [ 1578.737582][T18540] Bluetooth: hci5: command 0x0406 tx timeout [ 1579.015771][T21125] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3840'. [ 1579.201010][ T59] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 540 seconds [ 1579.201057][ T59] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 540 seconds [ 1579.201113][ T59] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 540 seconds [ 1579.201142][ T59] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 540 seconds [ 1579.406836][T21135] netlink: 'syz.1.3842': attribute type 15 has an invalid length. [ 1580.139489][T21145] orangefs_mount: mount request failed with -4 [ 1580.234255][T21150] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1580.234294][T21150] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1580.234401][T21150] vhci_hcd vhci_hcd.0: Device attached [ 1580.651684][T19455] usb 50-1: SetAddress Request (6) to port 0 [ 1580.651745][T19455] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1580.661057][T21154] vhci_hcd: connection closed [ 1580.661624][ T12] vhci_hcd vhci_hcd.8: stop threads [ 1580.661650][ T12] vhci_hcd vhci_hcd.8: release socket [ 1580.662963][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 1580.671168][T19455] usb 50-1: enqueue for inactive port 0 [ 1581.088746][T19455] usb usb50-port1: attempt power cycle [ 1583.197789][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 510 seconds [ 1583.197835][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 510 seconds [ 1583.197861][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 510 seconds [ 1583.197888][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 510 seconds [ 1583.386534][T19455] usb usb50-port1: unable to enumerate USB device [ 1583.632950][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3850'. [ 1583.653919][T21178] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1584.586356][T21181] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3852'. [ 1585.781239][T21194] netlink: 'syz.8.3856': attribute type 15 has an invalid length. [ 1586.393432][T21194] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 1587.381333][T21201] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3855'. [ 1588.490278][T21202] orangefs_mount: mount request failed with -4 [ 1589.300221][ T8545] lec:lec_start_xmit: lec0:No lecd attached [ 1589.384560][T21214] syzkaller0: entered promiscuous mode [ 1589.384575][T21214] syzkaller0: entered allmulticast mode [ 1589.962702][T21222] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3863'. [ 1590.070477][T21224] netlink: 79 bytes leftover after parsing attributes in process `syz.8.3864'. [ 1590.472583][T21228] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3859'. [ 1590.831227][ T6004] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1591.031064][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 1591.033114][ T6004] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1591.034132][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1591.034185][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1591.034197][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1591.034211][ T6004] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1591.034222][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1591.034233][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1591.034245][ T6004] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1591.036215][ T6004] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1591.036230][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.036240][ T6004] usb 7-1: Product: syz [ 1591.036247][ T6004] usb 7-1: Manufacturer: syz [ 1591.036255][ T6004] usb 7-1: SerialNumber: syz [ 1591.042901][ T6004] usb 7-1: config 0 descriptor?? [ 1591.044270][T21226] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1591.044581][T21226] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1591.053692][ T6004] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1591.361109][T19070] block nbd6: Possible stuck request ffff888025270000: control (read@0,1024B). Runtime 480 seconds [ 1591.361108][ T59] block nbd10: Possible stuck request ffff8880253b5080: control (read@0,1024B). Runtime 330 seconds [ 1591.361152][T19070] block nbd6: Possible stuck request ffff8880252701c0: control (read@1024,1024B). Runtime 480 seconds [ 1591.361152][ T59] block nbd10: Possible stuck request ffff8880253b5240: control (read@1024,1024B). Runtime 330 seconds [ 1591.724578][T21234] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1592.569312][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 1594.173932][T21233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1594.771388][T18208] usb 7-1: USB disconnect, device number 29 [ 1595.160866][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5870 ms [ 1595.160904][ C0] lec:lec_tx_timeout: lec0 [ 1595.394629][T21253] sch_fq: defrate 0 ignored. [ 1596.043645][T21255] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1598.159627][T21279] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3875'. [ 1598.727000][T21286] netlink: 79 bytes leftover after parsing attributes in process `syz.8.3879'. [ 1599.480987][ T7182] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1600.098320][T21301] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1600.098347][T21301] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1600.098509][T21301] vhci_hcd vhci_hcd.0: Device attached [ 1600.121078][ T7182] usb 9-1: Using ep0 maxpacket: 8 [ 1600.706185][T21308] sch_fq: defrate 0 ignored. [ 1601.703922][T21312] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1602.369883][T21303] vhci_hcd: connection closed [ 1602.712222][T13247] usb 40-1: SetAddress Request (2) to port 0 [ 1602.716938][T13247] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1603.092548][ T9177] vhci_hcd vhci_hcd.3: stop threads [ 1603.092573][ T9177] vhci_hcd vhci_hcd.3: release socket [ 1603.092635][ T9177] vhci_hcd vhci_hcd.3: disconnect device [ 1604.082675][ T7182] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1604.083695][ T7182] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1604.083728][ T7182] usb 9-1: can't read configurations, error -71 [ 1606.529582][T21331] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3888'. [ 1607.578941][T21340] netlink: 79 bytes leftover after parsing attributes in process `syz.8.3890'. [ 1607.607095][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.610173][ T1321] lec:lec_start_xmit: lec0:No lecd attached [ 1607.806678][T13247] usb 40-1: device descriptor read/8, error -110 [ 1608.196781][T13247] usb usb40-port1: attempt power cycle [ 1609.168607][T13247] usb usb40-port1: unable to enumerate USB device [ 1609.963213][ T46] block nbd4: Possible stuck request ffff8880251a0000: control (read@0,1024B). Runtime 570 seconds [ 1609.963259][ T46] block nbd4: Possible stuck request ffff8880251a01c0: control (read@1024,1024B). Runtime 570 seconds [ 1609.963286][ T46] block nbd4: Possible stuck request ffff8880251a0380: control (read@2048,1024B). Runtime 570 seconds [ 1609.963313][ T46] block nbd4: Possible stuck request ffff8880251a0540: control (read@3072,1024B). Runtime 570 seconds [ 1611.040213][T21364] netlink: 'syz.3.3895': attribute type 12 has an invalid length. [ 1611.986901][T21373] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1612.840917][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5240 ms [ 1612.840951][ C0] lec:lec_tx_timeout: lec0 [ 1613.821006][ T59] block nbd5: Possible stuck request ffff88802520e000: control (read@0,1024B). Runtime 540 seconds [ 1613.821051][ T59] block nbd5: Possible stuck request ffff88802520e1c0: control (read@1024,1024B). Runtime 540 seconds [ 1613.821136][ T59] block nbd5: Possible stuck request ffff88802520e380: control (read@2048,1024B). Runtime 540 seconds [ 1613.821165][ T59] block nbd5: Possible stuck request ffff88802520e540: control (read@3072,1024B). Runtime 540 seconds [ 1614.105971][T21381] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1614.105998][T21381] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1614.106086][T21381] vhci_hcd vhci_hcd.0: Device attached [ 1614.170930][T21383] vhci_hcd: connection closed [ 1614.242916][ T1559] vhci_hcd vhci_hcd.8: stop threads [ 1614.242944][ T1559] vhci_hcd vhci_hcd.8: release socket [ 1614.242981][ T1559] vhci_hcd vhci_hcd.8: disconnect device [ 1614.364487][ T38] INFO: task udevd:12992 blocked for more than 143 seconds. [ 1614.364516][ T38] Not tainted syzkaller #0 [ 1614.364522][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1614.364527][ T38] task:udevd state:D stack:22104 pid:12992 tgid:12992 ppid:5170 task_flags:0x400140 flags:0x00080002 [ 1614.364573][ T38] Call Trace: [ 1614.364580][ T38] [ 1614.364589][ T38] __schedule+0x1472/0x4fe0 [ 1614.364790][ T38] ? __pfx___schedule+0x10/0x10 [ 1614.364808][ T38] ? schedule+0x90/0x360 [ 1614.364821][ T38] schedule+0x164/0x360 [ 1614.364834][ T38] io_schedule+0x80/0xe0 [ 1614.364847][ T38] folio_wait_bit_common+0x6dd/0xbc0 [ 1614.364895][ T38] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1614.364909][ T38] ? __pfx_wake_page_function+0x10/0x10 [ 1614.364921][ T38] ? filemap_add_folio+0x3d9/0x610 [ 1614.364938][ T38] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 1614.364955][ T38] do_read_cache_folio+0x1a7/0x560 [ 1614.364970][ T38] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1614.365030][ T38] read_part_sector+0xb8/0x2b0 [ 1614.365066][ T38] adfspart_check_POWERTEC+0x92/0xef0 [ 1614.365078][ T38] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1614.365089][ T38] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1614.365099][ T38] ? set_page_refcounted+0xa0/0x1e0 [ 1614.365165][ T38] bdev_disk_changed+0x765/0x14c0 [ 1614.365185][ T38] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1614.365198][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1614.365232][ T38] blkdev_get_whole+0x2e5/0x480 [ 1614.365247][ T38] bdev_open+0x31e/0xcc0 [ 1614.365263][ T38] blkdev_open+0x485/0x620 [ 1614.365277][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 1614.365288][ T38] do_dentry_open+0x7d0/0x1270 [ 1614.365354][ T38] vfs_open+0x3b/0x350 [ 1614.365362][ T38] ? path_openat+0x34b1/0x3e70 [ 1614.365396][ T38] path_openat+0x34c9/0x3e70 [ 1614.365425][ T38] ? __pfx_path_openat+0x10/0x10 [ 1614.365436][ T38] ? kasan_save_track+0x4f/0x80 [ 1614.365482][ T38] ? kasan_save_track+0x3e/0x80 [ 1614.365493][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 1614.365505][ T38] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 1614.365555][ T38] ? getname_flags+0xb7/0x540 [ 1614.365588][ T38] ? do_sys_openat2+0xca/0x220 [ 1614.365601][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1614.365639][ T38] do_filp_open+0x22d/0x490 [ 1614.365653][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 1614.365663][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1614.365686][ T38] ? alloc_fd+0x64e/0x6c0 [ 1614.365745][ T38] do_sys_openat2+0x12f/0x220 [ 1614.365755][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1614.365840][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1614.365854][ T38] ? rcu_is_watching+0x15/0xb0 [ 1614.365873][ T38] __x64_sys_openat+0x138/0x170 [ 1614.365886][ T38] do_syscall_64+0xe2/0xf80 [ 1614.365943][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.365967][ T38] ? trace_irq_disable+0x37/0x100 [ 1614.365988][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1614.366001][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.366011][ T38] RIP: 0033:0x7f4ea03bd407 [ 1614.366026][ T38] RSP: 002b:00007ffc87318370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1614.366037][ T38] RAX: ffffffffffffffda RBX: 00007f4ea02cf880 RCX: 00007f4ea03bd407 [ 1614.366045][ T38] RDX: 00000000000a0800 RSI: 0000565043b034f0 RDI: ffffffffffffff9c [ 1614.366052][ T38] RBP: 0000565043ae2910 R08: 0000000000000000 R09: 0000000000000000 [ 1614.366059][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000565043af5e20 [ 1614.366065][ T38] R13: 0000565043af0190 R14: 0000000000000000 R15: 0000565043af5e20 [ 1614.366081][ T38] [ 1614.366087][ T38] INFO: task udevd:13063 blocked for more than 143 seconds. [ 1614.366094][ T38] Not tainted syzkaller #0 [ 1614.366099][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1614.366104][ T38] task:udevd state:D stack:22312 pid:13063 tgid:13063 ppid:5170 task_flags:0x400140 flags:0x00080002 [ 1614.366131][ T38] Call Trace: [ 1614.366135][ T38] [ 1614.366141][ T38] __schedule+0x1472/0x4fe0 [ 1614.366167][ T38] ? __pfx___schedule+0x10/0x10 [ 1614.366183][ T38] ? schedule+0x90/0x360 [ 1614.366196][ T38] schedule+0x164/0x360 [ 1614.366209][ T38] io_schedule+0x80/0xe0 [ 1614.366222][ T38] folio_wait_bit_common+0x6dd/0xbc0 [ 1614.366244][ T38] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1614.366258][ T38] ? __pfx_wake_page_function+0x10/0x10 [ 1614.366270][ T38] ? filemap_add_folio+0x3d9/0x610 [ 1614.366286][ T38] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 1614.366303][ T38] do_read_cache_folio+0x1a7/0x560 [ 1614.366317][ T38] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1614.366330][ T38] read_part_sector+0xb8/0x2b0 [ 1614.366342][ T38] adfspart_check_POWERTEC+0x92/0xef0 [ 1614.366353][ T38] ? bdev_disk_changed+0x71e/0x14c0 [ 1614.366363][ T38] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1614.366373][ T38] ? kasan_check_range+0x187/0x2c0 [ 1614.366392][ T38] bdev_disk_changed+0x765/0x14c0 [ 1614.366411][ T38] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1614.366424][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1614.366439][ T38] blkdev_get_whole+0x2e5/0x480 [ 1614.366453][ T38] bdev_open+0x31e/0xcc0 [ 1614.366468][ T38] blkdev_open+0x485/0x620 [ 1614.366482][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 1614.366493][ T38] do_dentry_open+0x7d0/0x1270 [ 1614.366513][ T38] vfs_open+0x3b/0x350 [ 1614.366521][ T38] ? path_openat+0x34b1/0x3e70 [ 1614.366538][ T38] path_openat+0x34c9/0x3e70 [ 1614.366567][ T38] ? __pfx_path_openat+0x10/0x10 [ 1614.366578][ T38] ? kasan_save_track+0x4f/0x80 [ 1614.366589][ T38] ? kasan_save_track+0x3e/0x80 [ 1614.366600][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 1614.366611][ T38] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 1614.366624][ T38] ? getname_flags+0xb7/0x540 [ 1614.366640][ T38] ? do_sys_openat2+0xca/0x220 [ 1614.366653][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1614.366674][ T38] do_filp_open+0x22d/0x490 [ 1614.366687][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 1614.366698][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1614.366720][ T38] ? alloc_fd+0x64e/0x6c0 [ 1614.366738][ T38] do_sys_openat2+0x12f/0x220 [ 1614.366748][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1614.366759][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1614.366772][ T38] ? rcu_is_watching+0x15/0xb0 [ 1614.366789][ T38] __x64_sys_openat+0x138/0x170 [ 1614.366802][ T38] do_syscall_64+0xe2/0xf80 [ 1614.366814][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.366824][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1614.366836][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.366845][ T38] RIP: 0033:0x7f4ea03bd407 [ 1614.366854][ T38] RSP: 002b:00007ffc87318370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1614.366864][ T38] RAX: ffffffffffffffda RBX: 00007f4ea02cf880 RCX: 00007f4ea03bd407 [ 1614.366871][ T38] RDX: 00000000000a0800 RSI: 0000565043af38a0 RDI: ffffffffffffff9c [ 1614.366878][ T38] RBP: 0000565043ae2910 R08: 0000000000000000 R09: 0000000000000000 [ 1614.366885][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000565043af5e20 [ 1614.366891][ T38] R13: 0000565043af0190 R14: 0000000000000000 R15: 0000565043af5e20 [ 1614.366907][ T38] [ 1614.366912][ T38] INFO: task udevd:13081 blocked for more than 143 seconds. [ 1614.366919][ T38] Not tainted syzkaller #0 [ 1614.366924][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1614.366928][ T38] task:udevd state:D stack:22280 pid:13081 tgid:13081 ppid:5170 task_flags:0x400140 flags:0x00080002 [ 1614.366954][ T38] Call Trace: [ 1614.366957][ T38] [ 1614.366963][ T38] __schedule+0x1472/0x4fe0 [ 1614.366989][ T38] ? __pfx___schedule+0x10/0x10 [ 1614.367005][ T38] ? schedule+0x90/0x360 [ 1614.367018][ T38] schedule+0x164/0x360 [ 1614.367031][ T38] io_schedule+0x80/0xe0 [ 1614.367044][ T38] folio_wait_bit_common+0x6dd/0xbc0 [ 1614.367066][ T38] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1614.367079][ T38] ? __pfx_wake_page_function+0x10/0x10 [ 1614.367092][ T38] ? filemap_add_folio+0x3d9/0x610 [ 1614.367103][ T38] ? __pfx___schedule+0x10/0x10 [ 1614.367118][ T38] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 1614.367134][ T38] do_read_cache_folio+0x1a7/0x560 [ 1614.367148][ T38] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1614.367162][ T38] read_part_sector+0xb8/0x2b0 [ 1614.367173][ T38] adfspart_check_POWERTEC+0x92/0xef0 [ 1614.367186][ T38] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1614.367202][ T38] bdev_disk_changed+0x765/0x14c0 [ 1614.367222][ T38] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1614.367234][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1614.367249][ T38] blkdev_get_whole+0x2e5/0x480 [ 1614.367263][ T38] bdev_open+0x31e/0xcc0 [ 1614.367278][ T38] blkdev_open+0x485/0x620 [ 1614.367291][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 1614.367302][ T38] do_dentry_open+0x7d0/0x1270 [ 1614.367323][ T38] vfs_open+0x3b/0x350 [ 1614.367331][ T38] ? path_openat+0x34b1/0x3e70 [ 1614.367343][ T38] path_openat+0x34c9/0x3e70 [ 1614.367371][ T38] ? __pfx_path_openat+0x10/0x10 [ 1614.367382][ T38] ? kasan_save_track+0x4f/0x80 [ 1614.367394][ T38] ? kasan_save_track+0x3e/0x80 [ 1614.367404][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 1614.367416][ T38] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 1614.367428][ T38] ? getname_flags+0xb7/0x540 [ 1614.367440][ T38] ? do_sys_openat2+0xca/0x220 [ 1614.367453][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1614.367474][ T38] do_filp_open+0x22d/0x490 [ 1614.367487][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 1614.367497][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1614.367519][ T38] ? alloc_fd+0x64e/0x6c0 [ 1614.367543][ T38] do_sys_openat2+0x12f/0x220 [ 1614.367553][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1614.367564][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1614.367577][ T38] ? rcu_is_watching+0x15/0xb0 [ 1614.367591][ T38] __x64_sys_openat+0x138/0x170 [ 1614.367604][ T38] do_syscall_64+0xe2/0xf80 [ 1614.367616][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.367626][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1614.367638][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.367648][ T38] RIP: 0033:0x7f4ea03bd407 [ 1614.367656][ T38] RSP: 002b:00007ffc87318370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1614.367666][ T38] RAX: ffffffffffffffda RBX: 00007f4ea02cf880 RCX: 00007f4ea03bd407 [ 1614.367673][ T38] RDX: 00000000000a0800 RSI: 0000565043affe00 RDI: ffffffffffffff9c [ 1614.367680][ T38] RBP: 0000565043ae2910 R08: 0000000000000000 R09: 0000000000000000 [ 1614.367686][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000565043afae00 [ 1614.367692][ T38] R13: 0000565043af0190 R14: 0000000000000000 R15: 0000565043afae00 [ 1614.367708][ T38] [ 1614.367715][ T38] INFO: task udevd:13261 blocked for more than 143 seconds. [ 1614.367721][ T38] Not tainted syzkaller #0 [ 1614.367726][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1614.367731][ T38] task:udevd state:D stack:21272 pid:13261 tgid:13261 ppid:5170 task_flags:0x400140 flags:0x00080002 [ 1614.367755][ T38] Call Trace: [ 1614.367759][ T38] [ 1614.367765][ T38] __schedule+0x1472/0x4fe0 [ 1614.367792][ T38] ? __pfx___schedule+0x10/0x10 [ 1614.367809][ T38] ? schedule+0x90/0x360 [ 1614.367821][ T38] schedule+0x164/0x360 [ 1614.367834][ T38] io_schedule+0x80/0xe0 [ 1614.367847][ T38] folio_wait_bit_common+0x6dd/0xbc0 [ 1614.367869][ T38] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1614.367883][ T38] ? __pfx_wake_page_function+0x10/0x10 [ 1614.367895][ T38] ? filemap_add_folio+0x3d9/0x610 [ 1614.367911][ T38] ? __filemap_get_folio_mpol+0x6fa/0xa50 [ 1614.367928][ T38] do_read_cache_folio+0x1a7/0x560 [ 1614.367942][ T38] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1614.367956][ T38] read_part_sector+0xb8/0x2b0 [ 1614.367967][ T38] adfspart_check_POWERTEC+0x92/0xef0 [ 1614.367978][ T38] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1614.367989][ T38] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1614.367999][ T38] ? set_page_refcounted+0xa0/0x1e0 [ 1614.368018][ T38] bdev_disk_changed+0x765/0x14c0 [ 1614.368037][ T38] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1614.368050][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1614.368065][ T38] blkdev_get_whole+0x2e5/0x480 [ 1614.368078][ T38] bdev_open+0x31e/0xcc0 [ 1614.368094][ T38] blkdev_open+0x485/0x620 [ 1614.368107][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 1614.368119][ T38] do_dentry_open+0x7d0/0x1270 [ 1614.368139][ T38] vfs_open+0x3b/0x350 [ 1614.368147][ T38] ? path_openat+0x34b1/0x3e70 [ 1614.368160][ T38] path_openat+0x34c9/0x3e70 [ 1614.368188][ T38] ? __pfx_path_openat+0x10/0x10 [ 1614.368199][ T38] ? kasan_save_track+0x4f/0x80 [ 1614.368211][ T38] ? kasan_save_track+0x3e/0x80 [ 1614.368222][ T38] ? __kasan_slab_alloc+0x6c/0x80 [ 1614.368233][ T38] ? kmem_cache_alloc_noprof+0x188/0x6a0 [ 1614.368245][ T38] ? getname_flags+0xb7/0x540 [ 1614.368257][ T38] ? do_sys_openat2+0xca/0x220 [ 1614.368270][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1614.368291][ T38] do_filp_open+0x22d/0x490 [ 1614.368304][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 1614.368314][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1614.368336][ T38] ? alloc_fd+0x64e/0x6c0 [ 1614.368355][ T38] do_sys_openat2+0x12f/0x220 [ 1614.368365][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1614.368376][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1614.368389][ T38] ? rcu_is_watching+0x15/0xb0 [ 1614.368403][ T38] __x64_sys_openat+0x138/0x170 [ 1614.368416][ T38] do_syscall_64+0xe2/0xf80 [ 1614.368428][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.368438][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1614.368450][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.368460][ T38] RIP: 0033:0x7f4ea03bd407 [ 1614.368468][ T38] RSP: 002b:00007ffc87318370 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1614.368477][ T38] RAX: ffffffffffffffda RBX: 00007f4ea02cf880 RCX: 00007f4ea03bd407 [ 1614.368484][ T38] RDX: 00000000000a0800 RSI: 0000565043aea880 RDI: ffffffffffffff9c [ 1614.368491][ T38] RBP: 0000565043ae2910 R08: 0000000000000000 R09: 0000000000000000 [ 1614.368498][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000565043ae2fb0 [ 1614.368504][ T38] R13: 0000565043af0190 R14: 0000000000000000 R15: 0000565043ae2fb0 [ 1614.368520][ T38] [ 1614.368571][ T38] [ 1614.368571][ T38] Showing all locks held in the system: [ 1614.368578][ T38] 1 lock held by khungtaskd/38: [ 1614.368584][ T38] #0: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1614.368626][ T38] 3 locks held by kworker/u8:3/44: [ 1614.368632][ T38] #0: ffff88801aad6138 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1614.368663][ T38] #1: ffffc90000b67bc0 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1614.368691][ T38] #2: ffff8880299eb188 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 1614.368794][ T38] 2 locks held by getty/5556: [ 1614.368801][ T38] #0: ffff8880312c70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1614.368863][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1614.368895][ T38] 5 locks held by kworker/u8:20/12294: [ 1614.368903][ T38] 1 lock held by udevd/12992: [ 1614.368908][ T38] #0: ffff8880253124c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1614.368930][ T38] 1 lock held by udevd/13063: [ 1614.368936][ T38] #0: ffff8880250f64c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1614.368958][ T38] 1 lock held by udevd/13081: [ 1614.368963][ T38] #0: ffff8880251664c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1614.368985][ T38] 1 lock held by udevd/13261: [ 1614.368991][ T38] #0: ffff88802518e4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1614.369019][ T38] 9 locks held by syz-executor/19932: [ 1614.369026][ T38] 2 locks held by syz.8.3896/21361: [ 1614.369031][ T38] #0: ffff88802572a2f8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1614.369058][ T38] #1: ffff88802958c358 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pptp_release+0x52/0x360 [ 1614.369111][ T38] 3 locks held by syz.8.3896/21372: [ 1614.369118][ T38] 3 locks held by syz.6.3898/21367: [ 1614.369124][ T38] #0: ffff88803f6870f8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1614.369149][ T38] #1: ffffffff8efa7ac0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1614.369174][ T38] #2: ffff8880819b08c8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 1614.369235][ T38] 1 lock held by syz.6.3898/21374: [ 1614.369242][ T38] 1 lock held by syz.1.3899/21376: [ 1614.369247][ T38] #0: ffffffff8ef3ea78 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc6/0xd70 [ 1614.369283][ T38] [ 1614.369286][ T38] ============================================= [ 1614.369286][ T38] [ 1614.369295][ T38] NMI backtrace for cpu 0 [ 1614.369307][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1614.369318][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1614.369324][ T38] Call Trace: [ 1614.369329][ T38] [ 1614.369333][ T38] dump_stack_lvl+0xe8/0x150 [ 1614.369355][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1614.369384][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1614.369406][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1614.369417][ T38] sys_info+0x135/0x170 [ 1614.369431][ T38] watchdog+0xf90/0xfe0 [ 1614.369450][ T38] ? watchdog+0x209/0xfe0 [ 1614.369466][ T38] kthread+0x726/0x8b0 [ 1614.369479][ T38] ? __pfx_watchdog+0x10/0x10 [ 1614.369491][ T38] ? __pfx_kthread+0x10/0x10 [ 1614.369502][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1614.369513][ T38] ? rt_spin_unlock+0x160/0x200 [ 1614.369522][ T38] ? __pfx_kthread+0x10/0x10 [ 1614.369538][ T38] ret_from_fork+0x51b/0xa40 [ 1614.369550][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1614.369559][ T38] ? __switch_to+0xc82/0x1410 [ 1614.369582][ T38] ? __pfx_kthread+0x10/0x10 [ 1614.369594][ T38] ret_from_fork_asm+0x1a/0x30 [ 1614.369615][ T38] [ 1614.369619][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1614.369657][ C1] NMI backtrace for cpu 1 [ 1614.369677][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1614.369696][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1614.369707][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1614.369732][ C1] Code: 08 50 02 e9 03 c2 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 11 1c 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1614.369748][ C1] RSP: 0018:ffffc900001d7e20 EFLAGS: 00000242 [ 1614.369763][ C1] RAX: 00000000033a7d19 RBX: ffffffff81981bfd RCX: 0000000080000001 [ 1614.369776][ C1] RDX: 0000000000000001 RSI: ffffffff8d33ad09 RDI: ffffffff8b85e800 [ 1614.369794][ C1] RBP: ffffc900001d7f10 R08: ffff8880b8933c5b R09: 1ffff1101712678b [ 1614.369807][ C1] R10: dffffc0000000000 R11: ffffed101712678c R12: ffffffff8f47de70 [ 1614.369820][ C1] R13: 1ffff110038dfb58 R14: 0000000000000001 R15: 0000000000000001 [ 1614.369832][ C1] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 1614.369847][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1614.369859][ C1] CR2: 00007f98b35b0218 CR3: 000000007212c000 CR4: 00000000003526f0 [ 1614.369875][ C1] Call Trace: [ 1614.369881][ C1] [ 1614.369888][ C1] default_idle+0x9/0x20 [ 1614.369912][ C1] default_idle_call+0x72/0xb0 [ 1614.369936][ C1] do_idle+0x1bd/0x500 [ 1614.369971][ C1] ? __pfx_do_idle+0x10/0x10 [ 1614.369995][ C1] ? do_idle+0xc/0x500 [ 1614.370017][ C1] cpu_startup_entry+0x43/0x60 [ 1614.370040][ C1] start_secondary+0x101/0x110 [ 1614.370056][ C1] common_startup_64+0x13e/0x147 [ 1614.370085][ C1] [ 1614.370639][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1614.370650][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1614.370661][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1614.370668][ T38] Call Trace: [ 1614.370672][ T38] [ 1614.370677][ T38] vpanic+0x1e0/0x670 [ 1614.370692][ T38] panic+0xc5/0xd0 [ 1614.370705][ T38] ? __pfx_panic+0x10/0x10 [ 1614.370722][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1614.370734][ T38] watchdog+0xfda/0xfe0 [ 1614.370749][ T38] ? watchdog+0x209/0xfe0 [ 1614.370776][ T38] kthread+0x726/0x8b0 [ 1614.370797][ T38] ? __pfx_watchdog+0x10/0x10 [ 1614.370818][ T38] ? __pfx_kthread+0x10/0x10 [ 1614.370837][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1614.370857][ T38] ? rt_spin_unlock+0x160/0x200 [ 1614.370872][ T38] ? __pfx_kthread+0x10/0x10 [ 1614.370895][ T38] ret_from_fork+0x51b/0xa40 [ 1614.370915][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1614.370933][ T38] ? __switch_to+0xc82/0x1410 [ 1614.370962][ T38] ? __pfx_kthread+0x10/0x10 [ 1614.370986][ T38] ret_from_fork_asm+0x1a/0x30 [ 1614.371024][ T38] [ 1614.371345][ T38] Kernel Offset: disabled